Adopting Open Source for Mission-Critical Applications: A Case Study on Single Sign-On

In this paper, we describe a specific selection process for security-related open source code, based on a methodology aimed at evaluating open source security frameworks in general and Single-Sign-On (SSO) systems in particular. Our evaluation criteria for open source security-related software include the community’s timeliness of reaction against newly discovered vulnerabilities or incidents.