Re: [xwiki-devs] XWiki Identity Management - Integrating Enterprise Sign On Engine

Hi Vincent, So I have had a look at the links provided below and while I don't know the Plexus framework very well I understand what its purpose is. Not to interfere in architecture decisions but Spring OSGi also looks quite nice in this space. Is Xwiki built around Spring?. Vincent Massol wrote: I think Acegi is going to play very nicely with what you guys are trying to do. I am going to embark on an Acegi -> ESOE integration over the next week or so which will mean that anything using Acegi will be right to go with ESOE. What Acegi will give you is really nice pluggable authentication, authorization and User management which will mean users wanting to do enterprise level SSO and authorization with ESOE will be able to do that but those wishing to just auth against ldap will also be able to do that. So Acegi is basically an integrator at the application level. ESOE and its associated client side SPEP is a step above that, it does all the heavy SAML and XACML lifting, the SPEP will hook into Acegi (just like say LDAP could) and provide the source of authentication, identity and authorization that Acegi will rely on when the application calls it. From the limited look I have had at JGuard it seems to play in the same space as Acegi. Hope this is of some help let me know what you think about Acegi, if you want to go with designing your own layer I'd need to probably see some discussion around that so I can give you feedback. regards, Bradley -- Bradley Beddoes Lead Software Architect Intient http://intient.com - "Building intelligent open source solutions for your enterprise"