diff --git a/CHANGELOG.md b/CHANGELOG.md
index b632d94..2365548 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+### 2.9.0
+
+* Add Oracle.com Single Sign-on authentication
+  - re-enables downloads from the Oracle Java Archive
+  - new parameters `ssousername`, `ssopassword`
+
 ### 2.8.3
 
 * Add support for Java '8u144' ([mtron](https://github.com/mtron))
@@ -17,11 +23,11 @@
 
 * Add support for Java '8u121'
 * Ease the installation of new Java SE releases using optional parameters (without updating the module)
- - `build`
- - `urlcode`
+  - `build`
+  - `urlcode`
 * **Warning** the following parameters were replaced:
- - `custom_download_url`: renamed to `download_url` and complemented by a new `filename` parameter
- - `custom_checksum`: renamed to `checksum`
+  - `custom_download_url`: renamed to `download_url` and complemented by a new `filename` parameter
+  - `custom_checksum`: renamed to `checksum`
 
 ### 2.7.4
 
@@ -31,8 +37,8 @@
 ### 2.7.3
 
 * Unset `provider` parameter on all `archive` resources (from `puppet-archive` module)
- - quick and dirty workaround until [SERVER-94](https://tickets.puppetlabs.com/browse/SERVER-94) gets fixed
- - **Warning:** may break behind a HTTP proxy (untested)
+  - quick and dirty workaround until [SERVER-94](https://tickets.puppetlabs.com/browse/SERVER-94) gets fixed
+  - **Warning:** may break behind a HTTP proxy (untested)
 * Tested on Fedora 25, Amazon Linux 2016.09
 
 ### 2.7.2
diff --git a/README.md b/README.md
index 0fe9fed..5b9f926 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,9 @@
 # oracle_java
 [![Build Status](https://travis-ci.org/antoineco/aco-oracle_java.svg?branch=master)](https://travis-ci.org/antoineco/aco-oracle_java)
 
-*By using this module you acknowledge that you have read and accepted the terms of the [Oracle Binary Code License Agreement for Java SE](http://www.oracle.com/technetwork/java/javase/terms/license/)*
+*By using this module you acknowledge that you have read and accepted the terms of the [Oracle Binary Code License Agreement for Java SE](http://www.oracle.com/technetwork/java/javase/terms/license/).*
+
+*Downloads from the Oracle Java Archive require an [Oracle.com account](https://login.oracle.com/mysso/signon.jsp).*
 
 #### Table of Contents
 
@@ -48,8 +50,10 @@ Install a specific version of the JDK
 
 ```puppet
 class { 'oracle_java':
-  version => '7u45',
-  type    => 'jdk'
+  version     => '7u45',
+  type        => 'jdk',
+  ssousername => 'me@example.com',	# only for packages from the Oracle Java Archive
+  ssopassword => 'mypassword'		#
 }
 ```
 
@@ -134,6 +138,12 @@ Java version to install, formatted as '*major_version*'u'*minor_version*' or sim
 ##### `format`
 What format of installation archive to retrieve. Valid values are `rpm` and `tar.gz`. Default depends on the platform.
 
+##### `ssousername`
+Oracle account username. Used to authenticate against Oracle.com Single Sign-on service and download packages from the Oracle Java Archive.
+
+##### `ssopassword`
+Oracle account password.
+
 ##### `install_path`
 Absolute root path where the Oracle Java archives are extracted. Requires `format` set to `tar.gz`. Defaults to `/usr/java`.
 
diff --git a/metadata.json b/metadata.json
index f39f5a0..d9509a9 100644
--- a/metadata.json
+++ b/metadata.json
@@ -5,7 +5,7 @@
   "project_page": "https://github.com/antoineco/aco-oracle_java",
   "source": "git://github.com/antoineco/aco-oracle_java.git",
   "summary": "Puppet module to install Oracle Java on Linux systems",
-  "version": "2.8.3",
+  "version": "2.9.0",
   "tags": ["jre","jdk","oracle","java"],
   "dependencies": [
     {