OpenSSO is a single sign-on solution that can centralize authentication and authorization for web applications, web services, and federated access. It provides standards-based authentication, authorization, federation, web access management and web services security. OpenSSO includes an embedded directory server and supports pluggable authentication mechanisms. It allows for federated single sign-on across domains using protocols like SAML and WS-Federation. OpenSSO also includes a security token service and policy-based authorization to secure web services. Finally, OpenSSO Identity Services provides platform-independent access to OpenSSO functionality through web services.