Entries from Virtual Identity Dialogue tagged with 'OVD'

Even More On Cache & VDS

Ash asked me to comment on a couple of responses to his blog.  This post is in response to the post made by the Identity Data Delivery blog. First off, while it’s true there are times when cache makes no...

Another Response to More on VDS and Cache

Ash gave me a heads up that there were some interesting comments on his blog in regards to caching and asked if I would give my thoughts.  Todd Clayton gave an example which I can summarize as follows: A company...

A Response to "More On VDS and Cache"

Ash Motiwala has some follow-up questions to my previous responses to him. After seeing my posted results he asks: "If so, then why does anyone use a persistent cache? Anyone?" Ash - this question has perplexed me as well :)....

Updated OVD Virtual MemberOf Example Plug-In - Now with Whipped Cream & Chocolate Sprinkles

Over the holiday break someone sent me a comment asking to update the Virtual MemberOf plug-in to support the condition where a person's member group was actually a member of another group. But I also encountered a customer requirement that...

Identity & Access Management Demos Available on Oracle Technical Demonstration Services (TDS)

Since a number of Oracle sales folks and partners read this blog - I wanted to help get the word out. Oracle maintains a system that allows you to demo live software from a hosted service called TDS. We have...

Responding to Virtual Directory and Persistent Cache

Over at Ash's Identity Management Rantings - Ash had a post asking questions about a topic that never seems to go away - "virtual directories and persistent cache". This seems to be Ash's response to an earlier post by Clayton....

LDAP - The Amphibian Of Identity Protocols

I took most of December off and being a football junkie - spent my non-work hours watching football, not writing blog posts. [edit - I realized I initially posted without tying the headline to anything I had written. That's what...

New OVD Samples and Tutorials Posts

I have added new sample OVD Java plug-ins to our sample code page. These include a "virtual memberof" attribute and one that uses Oracle Coherence for cache storage.  The memberof plug-in satisfies a common request - which is to allow...

Learn to Install and Configure OVD with Centralized Database User and Role Management

I have posted a set of viewlets designed in particular to help make it easier to understand configuring OVD when OVD is being used with Oracle Database to centralize user and role management (aka Enterprise User Security or EUS). There...

Writing Secure Code -- Links -- November 14, 2008

It was a slow week for links, so a little delay. Also trying out a new layout. "Top 10 Security Developments of the Last Decade" This is an interesting article outlining some of the items that have really helped improve...

Writing Secure Code -- Links -- November 7, 2008

Why traditional security doesn't work for SOA -- This is a good article on security challenges in Service Oriented Architecture (SOA). Oracle does provide an excellent security product in the SOA Suite (Oracle Web Services Security Manager or OWSM aka...

A Simple PeopleSoft and LDAP Overview

Greg Kelly has written a nice overview of the various ways PeopleSoft can leverage LDAP - including dynamic role creation. I would like to add two additional points to his post in relation to PeopleSoft and OVD. 1 - While...

I'm Speaking at (free!) Silicon Valley Code Camp - November 8 and 9, 2008

I know it's a bit of a late notice but if you will be in the Silicon Valley area and want to spend a weekend learning about a variety of coding topics (and not just Oracle) this looks to be...

How Oracle Can Help You Write More Secure Code

Now when James McGovern repeats his question of "when will Oracle show how to write secure code" we can point him to this post :). First - make sure to read and check-back with Oracle Secure Technology Center.This is basically...

Writing Secure Code - Links - October 10, 2008

Posting early since I'm taking Friday off. Crisis Begets accountability and transparency --  While not directly about software code it is an article that can be used as a "teachable moment" across many disciplines.  From a programming perspective, the lesson...

Two Cookies Can Make You Fat But They Are Not Two-Factor Authentication

This post is inspired by a conversation I had with one of our customers. They  have a team responsible for customer facing revenue applications and of course that team is trying to make sure they have strong security. On the...

More James McGovern Q and A

James was nice enough to ask more questions -  though I'm still curious as to how he thinks we specifically trail Microsoft in open-source contributions. So here for the enjoyment of the readers is my response: Maybe you could share...

Virtual Directory Litmus Test

Matt Flynn posted a paraphrased quote from Divya Sundaram of Motorola: If you front-end data (or a data store) that you don't own (or don't have control of), then you need to replicate/sync data (instead of virtualizing the view). And...

Writing Secure Code - Links - October 3, 2008

5 Password Utilities That Will Make Your Life Simpler -- Not really any coding tips but since passwords will be with us for a long time - these might be helpful for you and your users. Interesting they mentioned OpenID...

Update on Mapping User in Enterprise User Security (Central Database Account Administration)

When you map a user in Enterprise User Security (EUS) - I found that you can indeed avoid mapping the user in Enterprise Security Manager (ESM) if you provide the complete syntax when creating/altering the user. So for example: alter...