[kahawe]

I have used OpenLDAP and Sun LDAP on several occasions and while the initial learning curve for the whole "LDAP thing" might be steep for both, it was pretty obvious that OpenLDAP simply doesn't offer a lot of features that Sun's LDAP server has. And I agree with you, OpenSSO is a product where Sun really got it right and I am more than happy it got opensourced.

[buster]

Yes. But apparently Oracle abandoned the project. Looks like it is continued by ForgeRock: http://forgerock.com/openam.html

All that a few weeks after i recommended OpenSSO to a client.. sheez.. :P