Announcing: Red Hat Single Sign-On 7.1 GA Is Available

We are proud to announce general availability of Red Hat Single Sign-On 7.1 (RH-SSO). RH-SSO is a standards-based, out-of-the-box authentication, web single sign-on, and authorization service, which mediates between your enterprise user directory or third-party identity provider for identity information and your applications via standards-based tokens.

Documentation and downloads are available in the Customer Portal. RPM packages are available for Red Hat Enterprise Linux 6 and 7 systems through Red Hat Subscription Management.

Features and Highlights

OPENID CONNECT CERTIFICATION

The Keycloak version included in Red Hat Single Sign-On (RH-SSO) 7.1 conforms to the 5 OpenID Connect profiles: Basic, Implicit, Hybrid, Config, and Dynamic. Certification was achieved in Keycloak v2.3 (http://openid.net/certification/). Future RH-SSO versions will remain compatible with these profiles, unless documented otherwise.

 

CLIENT ADAPTER FOR RED HAT JBOSS FUSE

RH-SSO 7.1 features a new client adapter for Red Hat JBoss Fuse, which enables securing web application archives (WARs), servlets, Apache routes and Apache CXF endpoints deployed on JBoss Fuse, in both Apache Karaf and Red Hat JBoss Enterprise Application Platform (JBoss EAP).

 

NODE.JS CLIENT ADAPTER

RH-SSO 7.1 includes a new Node.js client adapter, which enables use of RH-SSO 7.1 Server for authentication and web single sign-on for Node.js applications.

 

EXTERNALIZED AUTHORIZATION SERVICE

RH-SSO 7.1 introduces a new authorization service feature-set, based on the User Managed Access specification. This enables RH-SSO 7.1 Server to act as a policy administration point, policy decision point, or policy information point, separating the authorization logic from the application.

 

USER STORAGE SPI

RH-SSO 7.1 features a new user storage SPI that you can use to implement your own custom user storage federation provider, such as a relational or NoSQL database, to enable federation of users from any user store.

 

SSSD INTEGRATION

RH-SSO 7.1 adds an integration with System Security Services Daemon (SSSD) in Red Hat Enterprise Linux (RHEL) 7.3. This enables use of SSSD as a user federation provider in front of a Microsoft Active Directory forest.

 

CLIENT REGISTRATION CLI

RH SSO 7.1 introduces a command-line interface (CLI) for developers to register client applications on RH-SSO Server.

 

Red Hat Summit 2017 – Planning your JBoss labs

This year in Boston, MA you can attend the Red Hat Summit 2017, the event to get your updates on open source technologies and meet with all the experts you follow throughout the year.

It’s taking place from May 2-4 and is full of interesting sessions, keynotes, and labs.

This year I was part of the process of selecting the labs you are going to experience at Red Hat Summit and wanted to share here some to help you plan your JBoss labs experience. These labs are for you to spend time with the experts who will teach you hands-on how to get the most out of your JBoss middleware products.

Each lab is a 2-hour session, so planning is essential to getting the most out of your days at Red Hat Summit.

As you might be struggling to find and plan your sessions together with some lab time, here is an overview of the labs you can find in the session catalog for exact room and times. Each entry includes the lab number, title, abstract, instructors and is linked to the session catalog entry:

Continue reading “Red Hat Summit 2017 – Planning your JBoss labs”

Oxford Dictionaries API competition 2017: help the world work, play, and communicate

Oxford Dictionaries runs a global API competition, and Red Hat and the 3scale team are more than happy to support this initiative. Find more about the competition here.

Oxford Dictionaries powers a huge range of technologies, apps, and digital services. Their world-renowned dictionary data powers search engines, provides definitions in e-readers, and makes predictive text and language-learning software possible. On top of their rich language data, which is integrated with cutting-edge technology, they provide an outstanding API. Oxford Dictionaries uses that to work with partners across the globe to create some of the most flexible and reliable platforms and services in the world.

Here is what the folks from Oxford Dictionaries have to say about their competition:

At Oxford Dictionaries, we love language, and we want the world to communicate more easily. So, to celebrate language, communication, and the launch of our API, we’re holding the Oxford Dictionaries API competition. To enter, simply create an app that uses one or more of the languages in the Oxford Dictionaries API. It doesn’t matter if your app is an existing application that has recently integrated Oxford Dictionaries data or a brand new app; already published in an app store or never-before publicized. You can enter as an individual or as a team. We want to see what you can create!

The winner and four runners-up will be showcased on our site and receive PRO subscriptions to our API and a collector’s mug, and we will send all entrants a collector’s T-shirt. You can find out more about the competition and how to enter here.

I wasn’t born with these powers, I’ve just learned to live with them…

Wanna know how to get a discount on your Summit pass? Wanna know where or what, the Summit party is gonna be? Then you should watch me embarrass myself in front of thousands of people in the Summit Party Promo video!

See that big guy doing nothing particularly embarrassing? Yeah? Well, that’s not me. I’m the plucky little guy in the backwards Sox hat who plays the butt of the joke in the last four seconds or so. Yup, that’s me, yours truly, ya boy, the self-deprecating weirdo.

So how did I get myself into this? Well, look out cause I’m fixin’ to tell ya, again…

Continue reading “I wasn’t born with these powers, I’ve just learned to live with them…”

Enhanced containerized integration services on OpenShift: Red Hat JBoss Fuse Integration Services

Updated and enhanced integration services are now available on Red Hat OpenShift. A containerized, formatted version of Red Hat JBoss Fuse 6.3 is now available for simplified deployments on OpenShift instances.

Technology is shifting so rapidly — from cloud-based architectures, Internet of Things and a variety of devices for interaction, new data streams, and mobile apps, to name a few — that organizations have to be able to create and deploy applications and process data quickly. Traditional, monolithic systems and top-heavy ESB-style integration approaches tend to be too slow and rigid to enable this level rapid innovation.

That is where an agile integration framework like JBoss Fuse can be a foundational element in your IT and digital strategy. Agile integration has three core capabilities: distributed integration, containers, and an API-based architecture.

  1. JBoss Fuse uses the lightweight distributed integration patterns of the underlying Apache Camel project.
  2. As part of the JBoss middleware services on OpenShift, JBoss Fuse is available for rapid deployment within container and cloud environments. Red Hat OpenShift is based on Docker and Kubernetes. Container architectures allow developers to build and integrate traditional and microservices-based applications at scale quickly.
  3. JBoss Fuse can be used together with Red Hat 3scale API Management Platform as an engine to develop and deploy APIs, both internally to development groups and externally for customer and partner ecosystems.

Integration technologies help organizations build on their existing infrastructures even as they pivot to new cloud-based and service-based architectures.

Features (and Benefits) at a Glance

  • Spring Boot support
  • Custom-developed, containerized applications based on Apache Camel 2.18
  • Integration with Hystrix and Zipkin microservices frameworks
  • An optimized integration environment for microservices applications on Red Hat OpenShift
  • Path to transition off existing Apache Karaf-based applications to cloud architectures
  • Consistent hybrid integration platform across their enterprise

More Information

Adding complex business logic to processes with JBoss BPM

In June 2016 the Manning Early Access Program (MEAP) started for the book Effective Business Process Management with JBoss BPM.

What is a MEAP?

The Effective Business Process Management with JBoss BPM MEAP gives you full access to read chapters as they are written, get the finished eBook as soon as it’s ready, and receive the paper book long before it’s in bookstores.

You can also interact with the author, that’s me, on the forums to provided feedback as the book is being written. So come on over and get started today with Effective Business Process Management with JBoss BPM.

The way the MEAP works is that every month or so Manning puts a new chapter online. Lost a bit in the holidays, but chapter 6 was made available and those already in the MEAP will have had access to start reading the chapter.

As mentioned when chapter 5 released, I expected to split out the chapter into a second as the content covered was too expansive. I divided it into the simpler basics of creating business logic with rules and moved on into more advanced topics.

Enjoy topics such as modeling complex domains with domain specific languages (DSL), capturing complex logic in decision tables and leveraging DSLs in your guided rules. All this takes you a step closer to effectively implementing your business logic with JBoss BPM.

To give you an idea of what’s available so far:

You can read this excerpt online before you decide, but I look forward to hearing from you on the content and stay tuned for more.

 

See more by Eric D. Schabell, contact him on Twitter for comments or visit his home site.

Red Hat launches 3scale APIcast – faster, flexible, open source API gateway

Dockerized version of APIcast 2.0 deploys on OpenShift for easier installation and operation in microservice environments

Today we’re happy to announce the general availability of Red Hat 3scale APIcast gateway 2.0. The APIcast gateway (NGINX-based) is open source and has served hundreds of happy customers over the last four years. Now we’ve taken it to the next level, supporting both a cloud gateway or hybrid model with an on-prem gateway. In fact, the new on-premise version introduces significant upgrades in terms of performance and flexibility. 3scale was the first in market with on-prem and now we are pleased to offer the second generation.

The API gateway, which is configured within 3scale’s Admin Portal, is part of the 3scale API Management SaaS offering. The Admin Portal allows customers to define desired authentication methods, set rate limits, get analytics on the usage of their APIs, and create a developer portal for their API consumers. APIcast 2.0  is the first of two on-prem releases. With the upcoming 3scale on-premise release, customers will be able to deploy the entire 3scale API Management Platform on-premises. Stay tuned!

Companies are increasingly migrating to microservices architecture, so the average number of API services managed with 3scale have significantly increased, and continue to do so. To accommodate to these requirements, APIcast changes the way it pulls the configuration from the Admin Portal. For starters, now it’s now possible to pull the configuration for just a subset of services. In addition, it makes it easier to automate the deployment of multiple gateways by providing the gateway configuration via a JSON file which can be fetched by an API. It also supports two environments out-of-the-box (staging and production) with options to enable always-up-to-date configs in staging, and control of updates in production. For example, you can set the reload config variable to true so it reloads the API gateway configuration with each request, which comes in handy during development phases.

Another big change introduced with APIcast 2.0 is the enhanced integration with Red Hat’s OpenShift Container Platform, which leverages Docker and Kubernetes for an easier deployment and DevOps experience. The new OpenShift template pulls the dockerized image of APIcast from the Red Hat container registry and lets you enable/disable key features of the API gateway by just changing the value of the corresponding template parameter.

Get started with APIcast 2.0:

It’s Official: MicroProfile Is Now Eclipse MicroProfile

MicroProfile is a community project with the mission of optimizing Enterprise Java for a microservices architecture.  In a short period of time, MicroProfile has reached three important milestones:

  1. June 27, 2016: Red Hat, IBM, Tomitribe, Payara and the London Java Community announced MicroProfile at DevNation.
  2. September 19, 2016: MicroProfile 1.0 was released at JavaOne 2016 with 5 implementations (and a 6th planned). The SouJava community joined to support the effort and Hammock was added as a implementation.
  3. December 14, 2016: The Eclipse Foundation Board approved the MicroProfile proposal, meaning that Eclipse MicroProfile is now an Eclipse incubator project. Mike Milinkovich, Eclipse Foundation Executive Director,  informed the community shortly after the vote.

The community is having active discussions on process (project evolution) and microservice APIs like application configuration, monitoring, health check, messaging, circuit breakers, and more.  Some discussions are even backed by real (proof of concept) code! The MicroProfile community is currently planning its next release. Feel free to join the discussion and help define the future of Enterprise Java microservices!

Announcing: Red Hat Single Sign-On 7.1 Beta Is Available

We are excited to announce beta availability of Red Hat Single Sign-On 7.1 (RH-SSO). RH-SSO is a standards-based, out-of-the-box authentication, web single sign-on, and authorization service, which mediates between your enterprise user directory or third-party identity provider for identity information and your applications via standards-based tokens.

Beta documentation and code downloads are available in the Customer Portal. RPM packages are available for Linux systems through Red Hat Subscription Management.

Features and Highlights

Continue reading “Announcing: Red Hat Single Sign-On 7.1 Beta Is Available”

Webinar Now: In-Memory Computing and Real-Time Analytics

In-memory data grids provide a distributed network (or “grid”) of nodes that work as an elastic data store. This is an approach to distributed computing which can work as a foundation for systems which require rapid scale, responsiveness, and high loads, like Internet of Things and mobile applications.

In-memory computing (like any distributed architecture) can be very complex, and understanding how to map the functionality of your existing infrastructure to a distributed computing infrastructure is critical.

So we have a webinar for that! “Real-time advantages of an in-memory data platform” with Cojan van Ballegooijen and Thomas Qvarnstrom (both JBoss technology evangelist at Red Hat) will be covering:

  • An introduction to in-memory computing
  • In-memory data grid use cases
  • How data access can affect business decision making, application responsiveness, and customer / revenue opportunities

Details

  • Tuesday, Dec. 6
  • 11a.m. Eastern time (US)
  • Presenters: Cojan van Ballegooijen and Thomas Qvarnstrom

register_now