OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Enterprise Sign On Engine (ESOE) Beta 1

Enterprise Sign On Engine (ESOE) Beta 1
Bradley Beddoes, Internet2 Announcement

"For the past 10 months we've been working on a system we call the
Enterprise Sign On Engine. Its a SAML2 implementation in both Java and
C++ as well as being an implementation of (albeit reduced) XACML 2.0
spec. ESOE supports features like native windows integration,
integration with Shibboleth, integration with OpenID and of extremely
powerful, centralized authorization policies. It also performs tasks
such as attribute aggregation and monitoring of client versions in use
at service providers but to name a few of its features. While SAML 2
based if you thing of the CAS type of market then thats a good chunk of
the space in which ESOE is playing. Its not a replacement for Shibboleth
but we believe it to be extremely complimentary. The project is released
under the Apache 2.0 license."  From the web site
description: "The ESOE is built using the OASIS SAML 2.0 specification,
and the ESOE's powerful authorization engine is built around a reduced
version of the OASIS XACML 2.0 standard which we have called Lightweight
Extensible Authorization Control Markup Language or 'LXACML'. The ESOE
can integrate identity from unlimited repositories, automatically create
sessions for users whom are logged into Active Directory (true single
sign on), provide for centralized authorization policy management and
natively federate with technologies such as Shibboleth and OpenID. We
hope you'll find the ESOE a good choice for your needs amongst the wide
variety of SSO solutions that are available, both from commercial
providers and other open source projects. Of course if you're already
using an SSO solution, there is a pretty good chance the ESOE can
interact with it, allowing you to use the enhanced capabilities of the
ESOE without needing to replace everything you already have. Being
heavily standards based, all your existing identity infrastructure such
as LDAP compliant directories, databases and even flat files are only a
plugin away."

See also the ESOE features:

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]