[security-dev] AS8 Security Design Discussions

[Anil Saldhana]

Hi All,
   the AS community work has moved on to AS8 which will primarily target 
Java EE7.  This also means that we can actually take a look at changing 
the Security subsystem in the AS and incorporate changes that will help 
usability and deprecate functionality that are seldom used/low priority.

Stefan, Darran and I have been discussing a few approaches in the last 
few weeks.  Some of the major changes that may affect the design is the 
deprecation of JAAS as primary authentication approach and bring in more 
of PicketLink IDM to the forefront.

We can use this mailing list for discussions on AS8 security or we can 
use the AS7 dev list or do it in the forums.

Regards,
Anil