Information Cards for Active Directory Users

This tutorial shows how simple it is to setup WSO2 Identity Solution with an existing LDAP directory.

Identity as a Service

Here's an interesting presentation by Prabath :

Identity as a Service

View SlideShare presentation or Upload your own. (tags: cardspace identityopenidsoa)

OpenId integration of WSO2 Identity Solution

http://wso2.org/library/3518 by Prabath

WSO2 Identity Solution 1.0 is now available

We released the WSO2 Identity Solution last week with an Identity Provider and a set of relying party components.

The identity provider component supports issuance of information cards and tokens defined by Microsoft CardSpace specifications. Some of the main features are :

• Simple management console


• Ability to connect to custom user stores (LDAP/Microsoft ActiveDirectory, JDBC)


• Built in user store


• Support for the CardSpace default claim set


• Support for custom claim dialects and claims types


• Statistics/reporting/audit trail


• Ability to revoke information cards


• Issues information cards based on username-token credential and self issued credential

The relying party components includes an Apache2 HTTPD module (mod_cspace) and a Java servlet filter component. mod_cspace has useful features such as ability to enforce CardSpace authentication on static web content. Extensions for Drupal, MediaWiki are also available that can be easily configured with mod_cspace.

Documentation on setting up and using the identity provider and other relying party components are available at http://wso2.org/project/solutions/identity/1.0/docs/index.html

WSO2 IS : Idnetity Provider updated to trust all valid RPs

During the Barcelona Catalyst OSIS Interop we figured out that we are too strict in validation of relying parties where we expected the admin of the identity provider or users of the identity provider to specifically register relying parties. Now we have removed this restriction and the identity provider now can issue tokens to any relying party with a certificate issued by a known CA.

In the case where a relying party doesn't meet the above requirement, users can add that as a trusted relying party after logging in with their user name/password or self issued information card.




The WO2 Identity Solution identity provider instance for interop work is available at : https://identity.lk.wso2.com:12443/