Blogs

January, 2019 This is the third post in a three part series. In the first part, which was more than a year and a half ago, I described Unicon's IAM Docker images. In the second post, I listed the Internet2 TIER program's Docker images. In this, the final post, I discuss the pros and cons of the various versions of the images.

January, 2019 If you could search your own library of books digitally, how would you do it? Would you do a simple text search for certain keywords or phrases? Simple text searches can be powerful but typically only answer the question "where are these terms mentioned in my books?"

January, 2019 This is the second posting in a three part series. In the first part, which was more than a year and a half ago, I described Unicon's IAM Docker images. In this post, I list the Internet2 TIER program's Docker images. In the final post, I discuss the pros and cons of the various related images.

January, 2019 The quarterly openEQUELLA Open Source Support (OSS) Briefing is an opportunity to share the contributions performed on behalf of the OSS program, highlight Unicon's perspective on contributions, share happenings in the community, and describe opportunities to engage further with Unicon.

December, 2018 - At Unicon, our security operations (sec-ops) staff engages with project teams early to determine what support is needed throughout the project. Considerations and risk indicators for projects include the security classification of the data that will be handled, and the project activities which may include data analytics, software development, infrastructure design and deployment, and production operations.

November, 2018 - The quarterly openEQUELLA Open Source Support (OSS) Briefing is an opportunity to share the contributions performed on behalf of the OSS program, highlight Unicon's perspective on contributions, share happenings in the community, and describe opportunities to engage further with Unicon.

November, 2018 - When it comes to deploying a highly available CAS server, one of the chief concerns is to choose a technology that is capable of sharing CAS-generated tickets across multiple server nodes. The task of managing and administering CAS tickets is handled today by a Ticket Registry component that is backed by a variety of technologies able to persist, manage, and distribute ticket objects across the entire CAS cluster. Perhaps the most popular and better-adopted option in this area is a ticket registry solution backed by Hazelcast.

October, 2018 - Modern CAS (versions 5.2+) has an ability to interrupt authentication flow after primary authentication principal trust has been established. This ability enables CAS to execute an intermediary piece of application logic before continuing to establish Web Single Sign On session and routing requests back to target applications. These intermediary interrupt components are able to implement logic, for example, to present notification messages to the user, provide options for redirects to external services, etc.