Page Operations
Browse Space
What is JOSSO ?
JOSSO, or Java Open Single Sign-On, is an open source J2EE-based SSO infrastructure aimed to provide a solution for centralized, platform neutral, user authentication and authorization.
Main Features
- J2EE Transparent Single Sign-On cross domain/cross organization.
- Pluggable Framework to allow the implementation of multiple authentication schemes and stores using Spring or built-in IoC container.
- Runs in Apache Tomcat.
- Runs in JBoss application server.
- Runs in Apache Geronimo application server
- Integrates with Spring Acegi.
- Provides Identity information to Web applications and EJBs through the standard Servlet and EJB Security API respectively.
- Supports Strong Authentication using X.509 client certificates.
- LDAP support for storing user information and credentials.
- Database support for storing user information and credentials.
- Client API for PHP. This allows to build SSO-enabled PHP applications.
- Client API for Microsoft ASP. This allows to build SSO-enabled ASP applications.
- Compatibility with Apache Pluto Portlet Container
- Standard Based: JAAS, Web Services/SOAP, EJB, Struts, Servlet/JSP,J2EE.
- 100% Java
For more information see the JOSSO Architecture Overview
Download
| Package | Version | .zip | .tgz |
|---|---|---|---|
| josso | 1.6 | Download | Download |
| josso + tomcat | 1.6 | Download | Download |
| josso + jboss | 1.6 | Download | Download |
| All | 1.6 | All Downloads | All Downloads |
Where do I start ?
In order to SSO-enable your application using JOSSO you can follow this trail :
- Setup JOSSO for your platform
- Configure the JOSSO Gateway for your needs
- Make your Java web application become a JOSSO partner application
For more information check out the Developer guides.
Need JOSSO Support ?
For commercial support refer to Atricore, the company providing professional services for JOSSO.
For community support check out the support forums. Forum topics are answered on a volunteer basis by JOSSO users and project members.
Upcoming Trainings
Check for available training sessions here .
Contributing
We are always looking for contributions. Please contact us here
News
JBoss 4.2.2.GA+ is now supported by JOSSO 1.6. Suport patch josso-1.6-1830606 has been released to upgrade current JOSSO distribution. You can download the patch here.
For detailed technical guidelines on how to apply the patch see JBoss 4.2 Setup Guide
Apache Geronimo J2EE server 2.0 is now officially supported by JOSSO 1.6 for both Single Sign-On Agent and Gateway deployments.
For detailed technical guidelines on how to setup JOSSO with Apache Geronimo see : Geronimo 2.0.1+ Setup
A pre-configured Apache Geronimo instance and the JOSSO dependencies snapshot are available for download here : http://sourceforge.net/project/showfiles.php?group_id=116854&package_id=129496
The JOSSO Single Sign-on Project has released the 1.6 version which includes full support for the Spring framework, by leveraging its IoC container and integrating Acegi Security for fine-grained access control and authorization.
What's new in 1.6 :
- Includes full support for Spring 2.0
- Allows defining SSO beans using the Spring XML configuration format while keeping backward compatibility with the legacy one....
Hello Josso Community,
First of all, thanks for your support during almost 3 years of life! Around 70,000 downloads and a growing community, among other things, is something that is pushing the project to the next level.
The Josso team is rapidly growing and currently putting a lot of effort on completing the upcoming Josso 2.0 release which will represent a major leap forward for Single Sign-On technology and Identity Management in general....
What's new in 1.5 :
- Fully transparent and configuration-free cross-organization/cross-domain Single Sign-On brings simplified mid-end and high-end IdM deployments.
- Supports programmatic authentication for remote SOAP clients.
- Improved protocol allows more secure SSO message exchange through out-of-band centric messaging.
- Added support in PHP and ASP interfaces for leveraging cross-organization/cross-domain SSO and programmatic authentication....