What is Delegated Administration?
DEFINED The ability to control access on the security system itself. This control is exercised inside the policy administration...
Read articleBlog
Symas Blog
Articles and updates from Symas, Marty, and Howard.
Mastodon links open in a new tab. RSS includes Symas articles only.
The Case for a Policy Decision Point inside the LDAP Server
WHY ON EARTH WOULD YOU DO THAT? We all understand that runtime characteristics change as processes get moved around the network. Having...
Read articleEnabling Java EE and Fortress Security inside an Apache Wicket Web App
INTRODUCTION The aim of this tutorial is to demonstrate how a simple wicket web app can be converted to use java EE and fortress security....
Read articleThe Seven Steps of Role Engineering
Role engineering takes us from a human readable policy syntax to what is loaded into an rbac engine and used by an application or system
Read articleWhy Another Open Source IAM Product?
A question that has been lingering. It’s fair game, but before I get around to actually answering, let’s remember how we got here. Late...
Read articleABAC – Where are the Functional Specs?
As a security architect I have long-awaited the means to express authorization policies using dynamic constraints – in a standard way....
Read articleUsing Roles for Access Control is NOT RBAC
Using roles for access control is not Role-Based Access Control!
Read articleNew Symas Download Site
A NEW DOWNLOAD SITE IS AVAILABLE FOR OUR PRODUCTS: HTTPS://SYMAS.COM/DOWNLOADS WHAT’S NEW? BETTER ORGANIZATION AND NAVIGATION We have...
Read articleCarrier-Grade Stability and Performance
Early last year our client Acision ran a torture test on Symas OpenLDAP as part of acceptance testing for their telco offerings. These...
Read articleHow OpenLDAP Brought an Efficient New RBAC Security Solution to the Next Level
Shawn McKinney started developing RBAC systems 15 years ago, as a Security Architect for a major financial services company with...
Read articleSymas Products Not Susceptible to Recent OpenSSL "Heartbleed"Vulnerability
Within the past few days the internet has been flooded with news and discussion of a recent OpenSSL vulnerability with far reaching...
Read articleThoughts on Translucency
Our EMC Partner’s Senior Architect has been out preaching the magic of translucency. When I mention that to folks, I get kind of a...
Read article