PicketLink is an umbrella project for security and identity management for Java Applications. It is licensed under a friendly Apache v2 license. It supports Federation of authentication across a variety of schemes.