Oracle kills OpenSSO Express - ForgeRock steps in
OpenSSO Express has been removed for download from Oracle's website, leaving users of the community version of what was Sun's single sign-on platform to either, build their own version from source code, or to go to a third party. Norwegian company ForgeRock has stepped in and released OpenAM, based on OpenSSO source code. The ForgeRock builds are available to download. ForgeRock CEO, Lasse Andresen called Oracle's move "surprising", but said ForgeRock would be the new home for OpenSSO, now called OpenAM due to Oracle IP issues. He added that it would be "committed to the existing roadmap from a product development standpoint, and to more open participation with the community". ForgeRock had already made plans for the future of OpenSSO and has detailed them in a FAQ.
Oracle's policy change appears to have been unannounced, leaving some users of OpenSSO unsure of the future of the product. According to postings on the OpenSSO users mailing list it appears that Oracle are applying a policy where evaluation versions are made available on otn.oracle.com. The previous OpenSSO Express builds are now completely unsupported and have been withdrawn.
Sun introduced OpenSSO Enterprise in 2008, with a 12 monthly release cycle, and made OpenSSO Express available as a pre-built three monthly snapshot for users who wanted to use the community version. Under the new arrangements, OpenSSO 8.0 Enterprise is downloadable from the Sun download center and OpenSSO 8.0 Update 1 is now only available to customers with a SunSolve contract.