ObjectSecurity releases OpenPMF security management support for GlassFish

(Cambridge/UK - 01 August 2007, press release from 18 April 2007)

ObjectSecurity's OpenPMF security management framework has been integrated with GlassFish. This way, central policy enforcement and monitoring is now possible for GlassFish based web services (other web services are also supported).

ObjectSecurity's Open Policy Management Framework (OpenPMF™) is a technology framework for
centralised security policy management and enforcement for complex distributed systems. The main benefits are reduced complexity/cost, and more effective security. It offers far better flexibility and manageability than traditional federated identity and access solutions or other current products in the market offer. A consistent security policy is automatically generated using ObjectSecurity's SecureMDA model driven security technology, and stored and graphically administered in a central, meta-model based repository. Policies are automatically enforced through local policy enforcement points (PEPs) on any networked system and application. In addition, real-time security incident and compliance monitoring can be done from the central
console.

The new OpenPMF GlassFish v2 integration policy enforcement plug-in is built using Java EE. It conforms to the Java Authorization Contract for Containers (JACC) API developed by the Java Community Process (JCP) as an answer to the JSR-115. The new OpenPMF SOA version works with GlassFish v2 and selected Java EE 5 compliant application servers used to offer XML web services across the internet. One particularly innovative feature of the new OpenPMF plug-in is the tool-supported smart merging process of policies from OpenPMF and Java EE deployment descriptors.

OpenPMF is currently provided as rental software, which makes it practically as cost-effective and risk-free as open source with a support contract subscription.

If you would like to know more about this, we invite you to visit our website at www.openpmf.com or www.objectsecurity.com.