RE: Web single sign-on

Dave,

I have been working on a major e-business project using bea and rsa products. (Rsa bought
Securant) I can tell you this, you can create your own solution, but it is very complicated
compared to the products out there. Keep in mind, nothing is fully compatible and it will
take a good amount of effort on your part to get it working.

I have integrated Keon, Cleartrust and Ace with Bea Weblogic/Portal. (Different parts of the portal
required different access requirements) I had to use the api's with java and c.

No matter what the vendors say, no product out there is fully compatible or really has been
tested to scale to thousands of users. (We have been working with the Rsa engineers for months
while doing a load test of 20 users)

Jeff

-----Original Message-----
From: David M. Williams [mailto:d_wllms@lanl.gov] Sent: Monday, December 09, 2002 1:30 PM
To: Marty
Cc: vuln-dev@securityfocus.com
Subject: Re: Web single sign-on

you might want to look at some of the Netegrity solutions. they've been around for a long time and have imho solid products.

Dave

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Marty wrote:

>Hi group,

-- 
David M. Williams, CISSP		Phone: 505-665-8062
Systems Engineer, CCN-2			Fax:   505-667-7428
Los Alamos National Laboratory		Email: d_wllms@lanl.gov


 
____________________________________________________________________________
This e-mail message is private and may contain confidential or privileged
information.