Dear All,

please find attached an updated version of the authentication and 
authorization approach based on OpenSSO.

Micha is currently working on migrating OpenTox website users and groups 
into a standalone OpenDS server (LDAP), which is intended to serve as 
the common backend for both Plone and OpenSSO. This way, we can 
hopefully use all existing PLONE group configurations for access 
policies in OpenSSO live!

Things look quite promising up to now. A drawback is currently the lack 
of a REST interface for mamnaging policies. Here is an overview over the 
REST interface implemented in OpenSSO as of 10/2009:
http://blogs.sun.com/docteger/entry/opensso_and_rest

Best regards
Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SSO_proposal.doc
Type: application/msword
Size: 524288 bytes
Desc: not available
URL: <http://lists.opentox.org/pipermail/development/attachments/20100319/82180c8a/attachment.doc>