Interoperable Business Web Services Using Project Metro and.net 3.5
|
|
|
- Bryce Howard
- 7 years ago
- Views:
Transcription
1 Interoperable Business Web Services Using Project Metro and.net 3.5 Harold Carr, Metro Lead Architect, Sun Microsystems Kevin Wittkopf, Senior Solutions Architect, Microsoft TS-6128
2 Learn how to architect and build interoperable business web services using Project Metro and.net JavaOne SM Conference java.sun.com/javaone 2
3 Agenda Overview of Java environment/.net 3.5 Web Service Interoperability Demos Token creation and validation Token expiration Identity and attribute extraction for Database search Identity propagation thru multiple web apps & services Brokered trust More info Q & A 2008 JavaOne SM Conference java.sun.com/javaone 3
4 Java Environment /.NET 3.5 Web Service Interoperability.NET 3.5 framework Windows Communication Foundation Java environment Project Metro (aka JAX-WS RI + WSIT/Tango) GlassFish application server (Java Platform, Enterprise Edition ("Java EE platform")) Basic web services WS-I: BP 1.1, BSP 1.0 Enterprise web services Oasis: WS-Security, WS-SecureConversation, WS-Trust, WS- SecurityPolicy, WS-ReliableMessaging, WS-AtomicTransactions, WS-Coordintation W3C: WS-Addressing, WS-Policy, WS-Transfer WS-MetadataExchange 2008 JavaOne SM Conference java.sun.com/javaone 4
5 Token Creation and Validation AM (Metro SOAP) STS 2a. Client (.NET SOAP) 2b. 1. 2c. 3. GetDataWS (GF/Metro SOAP) 1. HTTPS/MEX to get GetDataWS WSDL 1a. GetDataWS has WSDL that indicates SAML token required from STS 2. getdata called. 2a. HTTPS/MEX to get STS WSDL. 2b: HTTP/SAML security to do STS operation to get Token. 2c: Pass token w/attribute inserted directly in token to GetDataWS 3. GetDataWS returns result when valid token received JavaOne SM Conference java.sun.com/javaone 5
6 Protocols used in Token Creation scenario WS-Transfer/WS-Metadata Exchange Used to obtain service and STS WSDLs WS-Trust Used by client to obtain security token from STS WS-Security Used to sign/encrypt messages between client and service STS = Secure Token Service Sun Java System Access Manager in this example Uses SAML tokens More on STS and SAML in subsequent slides 2008 JavaOne SM Conference java.sun.com/javaone 6
7 Security Token Creation and Validation 2008 JavaOne SM Conference java.sun.com/javaone 7
8 Token Expiration AM (Metro SOAP) STS Client (.NET SOAP) GetDataWS (GF/Metro SOAP) 1. Same setup / interaction as previous slide. 1. Change token expiration on STS to 5 seconds. 2. After getting token from STS have client sleep 10 seconds then call getdata. Should receive invalid token fault 3. Change token expiration on STS to 15 seconds. 4. After getting token from STS have client sleep 10 seconds then call getdata. Should now receive valid result JavaOne SM Conference java.sun.com/javaone 8
9 STS used in SAML Token Creation scenario STS == Secure Token Service STS in this example is Java System Access Manager SAML == Security Assertion Markup Language SAML tokens generated by STS specify details ('claims') about client to server Tokens have predefined elements & attributes Token can include user-defined claims Token includes 'expires' element STS (in this example) sets expires to 15 seconds 2008 JavaOne SM Conference java.sun.com/javaone 9
10 Security Token Expiration 2008 JavaOne SM Conference java.sun.com/javaone 10
11 Identity and attribute extraction for Database Search Active Directory (.NET SOAP) STS 2a. Client (Metro SOAP) 1. 2b. 3. GetDataWS (IIS.NET SOAP) 1. HTTPS/MEX to get GetDataWS WSDL. 1a. GetDataWS has WSDL that indicates SAML token required from STS 2. User A (permission to SOME data) logs in and calls getdata. 2a. HTTPS/MEX and HTTP/SAML STS interaction. 2b. Pass token w/attribute inserted directly in token to GetDataWS 3. Use token to determine user role. Result should be a subset of data (e.g., 5 rows). User B (permission to ALL data) logs in and does SAME query. Result should be all data (e.g., 10 rows) JavaOne SM Conference java.sun.com/javaone 11
12 STS used in DB search scenario STS in this example is backed by Active Directory (AD) User supplies credentials to authenticate to Active Directory (username/password, X.509, etc) STS issues SAML token with claims regarding user Identity STS inserts additional claim regarding the users ROLE (as defined in AD) GetDataWS verifies SAML token issued by trusted STS Role extracted from SAML token Used in DB access 2008 JavaOne SM Conference java.sun.com/javaone 12
13 Identity for Role-based DB Access 2008 JavaOne SM Conference java.sun.com/javaone 13
14 Identity Propagation thru multiple web apps & services AM (Metro SOAP) STS A GetData Web App (GF/Metro SOAP) GetDataWS (IIS.NET SOAP) AuditWS (GF/Metro SOAP) AuditDB Client (browser using CardSpace) +RM RecordsDB 1. Browser-based client authenticates via CardSpace + AM 2. Client does call on GetData Web Application. 3. GetData WA calls GetDataWS.getData. 3a. GetDataWS will get data from RecordsDB. 3a. GetDataWS will also call AuditWS.audit. Will use WS-RM. Validate: record must be retrieved correctly and AuditDB verified. Audit record should show User A, time, Application, GetDataWS and RecordsDB. NOTE: GetDataWs and AuditWS also secured using initial client token JavaOne SM Conference java.sun.com/javaone 14
15 InfoCard CardSpace Microsoft s identity metasystem Supports multiple identity systems based on standards (e.g., WS-Security, WS-Trust, WS- MetadataExchange, WS-SecurityPolicy) Users download cards from identity providers their bank/etc, or create their own self-issued cards Cards used to convey any info from identity provider to relying party that makes sense to both of them CardSpace allows the user to select a card that provides identity and required claims to STS Java System Access Manager supports InfoCard using its own identity system SAML token returned by STS includes identity is propagated and verified by Metro and.net based services 2008 JavaOne SM Conference java.sun.com/javaone 15
16 WS-ReliableMessaging Used between GetDataWS and AuditWS To ensure audit trail Ensures all messages sent are received 2008 JavaOne SM Conference java.sun.com/javaone 16
17 Identity Propagation through multiple Web Applications and Services 2008 JavaOne SM Conference java.sun.com/javaone 17
18 Brokered Trust AM (Metro SOAP) STS A GetData Web App (GF/Metro SOAP) GetDataWS (IIS.NET SOAP) Active Directory (.NET SOAP) STS B AuditWS (GF/Metro SOAP) AuditDB Client (browser using CardSpace) +RM RecordsDB Same as previous scenario except: GetDataWS has trust relationship with STS A, AuditWS has trust relationship with STS B. STS A and B trust each other JavaOne SM Conference java.sun.com/javaone 18
19 Brokered Trust User supplies credentials to authenticate to STS A (Java System Access Manager) Identity is propagated through multiple web apps/services AuditWS does not know/trust STS A (Java System Access Manager) AuditWS trusts STS B (AD) STS B has a trust relationship with STS A (via WS-Trust) STS B can use STS A to validate identity 2008 JavaOne SM Conference java.sun.com/javaone 19
20 Identity Propagation through multiple Web Applications and Services + Brokered Trust 2008 JavaOne SM Conference java.sun.com/javaone 20
21 What we did not cover WS-AtomicTransactions & WS-Coordination All operations in TX boundary succeed or rollback Same TX as in EJBs and COM+/Serviced Components Now supported in web services WS-SecureConversation Optimization when multiple secure messages exchanged 2008 JavaOne SM Conference java.sun.com/javaone 21
22 Summary Web Service Interoperability Java technology-based web services using Metro and GlassFish application server.net 3.5 web services using Windows Communication Foundation Identity Java System Access Manager Microsoft Active Directory WS-Trust SAML InfoCard Security SAML, WS-Security, WS-SecureConversation, WS-SecurityPolicy 2008 JavaOne SM Conference java.sun.com/javaone 22
23 Related Sessions TS-6373 Next-Generation Web User Experience Interoperability with Java Platform, Enterprise Edition (Java EE Platform) Technology and Silverlight TS-6658 GlassFish Project Web Services Stack Metro : Easy to Use, Robust, and High-Performance BOF-5590 Java Technology for Web Services Secure Exchange: New WS-SX Standards in Action LAB-3410 Metro: Try Out Simple and Interoperable Web Services 2008 JavaOne SM Conference java.sun.com/javaone 23
24 Relevant Blogs WCF blog: InfoCard blogs: GlassFish project and Metro blogs: Java System Access Manager and OpenSSO blogs: JavaOne SM Conference java.sun.com/javaone 24
25 For More Information GlassFish project, Metro, Java System Access Manager, OpenSSO Windows Communications Foundation &.NET 3.5: WCF Interoperability Guide & Plugfests: Windows CardSpace: J+N (Java technology +.NET) Program: JavaOne SM Conference java.sun.com/javaone 25
26 Harold Carr, Metro Lead Architect, Sun Microsystems Kevin Wittkopf, Senior Solutions Architect, Microsoft TS JavaOne SM Conference java.sun.com/javaone 26
27 EXTRA SLIDES in case InfoCard demo doesn t work 2008 JavaOne SM Conference java.sun.com/javaone 27
28 2008 JavaOne SM Conference java.sun.com/javaone 28
Metro Web Services, NetBeans, GlassFish and OpenSSO in Action with Amazon WS, Azure, and Office
Metro Web Services, NetBeans, GlassFish and OpenSSO in Action with Amazon WS, Azure, and Office S305138 Harold Carr Metro Architect, Sun Microsystems, Inc. Learn how to use Metro-based web services and
Szolgáltatásorientált rendszerintegráció. WS-* standards
Szolgáltatásorientált rendszerintegráció WS-* standards Outline Requirements WS-* standards XML digital signature XML encryption 2 Integration requirements 3 Integration within a company SAP.NET? JEE SQL
JAVA API FOR XML WEB SERVICES INTRODUCTION TO JAX-WS, THE JAVA API FOR XML BASED WEB SERVICES (SOAP, WSDL)
JAX-WS JAX-WS - Java API for XML Web Services JAVA API FOR XML WEB SERVICES INTRODUCTION TO JAX-WS, THE JAVA API FOR XML BASED WEB SERVICES (SOAP, WSDL) Peter R. Egli INDIGOO.COM 1/20 Contents 1. What
Infocard and Eduroam. Enrique de la Hoz, Diego R. López, Antonio García, Samuel Muñoz
Infocard and Eduroam Enrique de la Hoz, Diego R. López, Antonio García, Samuel Muñoz Index Introduction to Infocard Infocard usage usso using Infocard in eduroam Questions Infocard Artifact with a unique
Software Requirement Specification Web Services Security
Software Requirement Specification Web Services Security Federation Manager 7.5 Version 0.3 (Draft) Please send comments to: dev@opensso.dev.java.net This document is subject to the following license:
Distributed Identification and Consumer Data Protection. Khaja Ahmed Microsoft Corporation
Distributed Identification and Consumer Data Protection Khaja Ahmed Microsoft Corporation Threats to Online Safety Consumer privacy has steadily declined as internet use grew over the years Greater use
Assessing the usefulness of the WS-I tools for interoperability testing
ELEKTROTEHNIŠKI VESTNIK 79(1-2): 61-67, 2012 ENGLISH EDITION Assessing the usefulness of the WS-I tools for interoperability testing Tomaž Korelič, Marjan Heričko University of Maribor, Faculty of Electrical
Federated Identity and Trust Management
Redpaper Axel Buecker Paul Ashley Neil Readshaw Federated Identity and Trust Management Introduction The cost of managing the life cycle of user identities is very high. Most organizations have to manage
REST and SOAP Services with Apache CXF
REST and SOAP Services with Apache CXF Andrei Shakirin, Talend ashakirin@talend.com ashakirin.blogspot.com/ Agenda Introduction in Apache CXF New CXF features Project using Apache CXF How CXF community
Presented By: Muhammad Afzal 08May, 2009
Secure Web ServiceTransportation for HL7 V3.0 Messages Authors: Somia Razzaq, Maqbool Hussain, Muhammad Afzal, Hafiz Farooq Ahmad Presented By: Muhammad Afzal 08May, 2009 NUST School of Electrical Engineering
The Role of Identity Enabled Web Services in Cloud Computing
The Role of Identity Enabled Web Services in Cloud Computing April 20, 2009 Patrick Harding CTO Agenda Web Services and the Cloud Identity Enabled Web Services Some Use Cases and Case Studies Questions
Web Services Security: What s Required To Secure A Service-Oriented Architecture. An Oracle White Paper January 2008
Web Services Security: What s Required To Secure A Service-Oriented Architecture An Oracle White Paper January 2008 Web Services Security: What s Required To Secure A Service-Oriented Architecture. INTRODUCTION
NIST s Guide to Secure Web Services
NIST s Guide to Secure Web Services Presented by Gaspar Modelo-Howard and Ratsameetip Wita Secure and Dependable Web Services National Institute of Standards and Technology. Special Publication 800-95:
AND SUN OPENSSO MICROSOFT GENEVA SERVER ENABLING UNPRECEDENTED COLLABORATION ACROSS HETEROGENEOUS IT ENVIRONMENTS. White Paper May 2009.
MICROSOFT GENEVA SERVER AND SUN OPENSSO ENABLING UNPRECEDENTED COLLABORATION ACROSS HETEROGENEOUS IT ENVIRONMENTS White Paper May 2009 Abstract Interoperability between applications in heterogeneous technology
Copyright 2012, Oracle and/or its affiliates. All rights reserved.
1 OTM and SOA Mark Hagan Principal Software Engineer Oracle Product Development Content What is SOA? What is Web Services Security? Web Services Security in OTM Futures 3 PARADIGM 4 Content What is SOA?
Enabling Federation and Web-Single Sign-On in Heterogeneous Landscapes with the Identity Provider and Security Token Service Supplied by SAP NetWeaver
Enabling Federation and Web-Single Sign-On in Heterogeneous Landscapes with the Identity Provider and Security Token Service Supplied by SAP NetWeaver SAP Product Management, SAP NetWeaver Identity Management
Secure Identity Propagation Using WS- Trust, SAML2, and WS-Security 12 Apr 2011 IBM Impact
Secure Identity Propagation Using WS- Trust, SAML2, and WS-Security 12 Apr 2011 IBM Impact Robert C. Broeckelmann Jr., Enterprise Middleware Architect Ryan Triplett, Middleware Security Architect Requirements
This Working Paper provides an introduction to the web services security standards.
International Civil Aviation Organization ATNICG WG/8-WP/12 AERONAUTICAL TELECOMMUNICATION NETWORK IMPLEMENTATION COORDINATION GROUP EIGHTH WORKING GROUP MEETING (ATNICG WG/8) Christchurch New Zealand
The Use of Service Oriented Architecture In Tax and Revenue
The Use of Service Oriented Architecture In Tax and Revenue Presented by: Bruce Baur & Adam Schaffer Revenue Solutions, Inc. Introduction Adam Schaffer Director, Revenue Administration Practice Line More
Privacy in Cloud Computing Through Identity Management
Privacy in Cloud Computing Through Identity Management Bharat Bhargava 1, Noopur Singh 2, Asher Sinclair 3 1 Computer Science, Purdue University 2 Electrical and Computer Engineering, Purdue University
GRA Reliable Secure Web Services Service Interaction Profile Version 1.2 Table of Contents
Table of Contents Acknowledgements... v Document Conventions... vi 1. Introduction and Purpose...1 1.1. Profile Selection Guidance...1 1.2. Usage...1 1.3. Profiles, Standards, and Recommendations...2 1.4.
Securing Web Services Using Microsoft Web Services Enhancements 1.0. Petr PALAS PortSight Software Architect petrp@portsight.com www.portsight.
Securing Web Services Using Microsoft Web Services Enhancements 1.0 Petr PALAS PortSight Software Architect petrp@portsight.com www.portsight.com Agenda What is WSE and Its Relationship to GXA Standards
Abstract of the Core Concepts of S.A.F.E.: Standards for Federated Identity Management
Abstract of the Core Concepts of S.A.F.E.: Standards for Federated Identity Management Subject: Responsible: Secure Access to Federated E-Justice/E-Government Federal and State Authorities Commission for
Web Services Security: OpenSSO and Access Management for SOA. Sang Shin Java Technology Evangelist Sun Microsystems, Inc. javapassion.
Web Services Security: OpenSSO and Access Management for SOA Sang Shin Java Technology Evangelist Sun Microsystems, Inc. javapassion.com 1 Agenda Need for Identity-based Web services security Single Sign-On
Redpaper. IBM Tivoli Security Solutions for Microsoft Software Environments. Front cover. ibm.com/redbooks
Front cover IBM Tivoli Security Solutions for Microsoft Software Environments Explaining common architecture and standards Deploying on Microsoft operating systems Securing Microsoft software environments
Chapter 1: Web Services Testing and soapui
Chapter 1: Web Services Testing and soapui SOA and web services Service-oriented solutions Case study Building blocks of SOA Simple Object Access Protocol Alternatives to SOAP REST Java Script Object Notation
Federated Identity Management Solutions
Federated Identity Management Solutions Jyri Kallela Helsinki University of Technology jkallela@cc.hut.fi Abstract Federated identity management allows users to access multiple services based on a single
Managing Net-Centric Systems: The Complexity of Web Services Management
AFEI - International Conference on Net-Centric Transformation - Going Live with SOA Managing Net-Centric Systems: The Complexity of Web Services 13 September 2005 Tim Bass, SilkRoad, Inc. Gartner Report
Introducing Windows Communication Foundation
Introducing Windows Communication Foundation David Chappell, Chappell & Associates January 2010 Copyright Microsoft Corporation 2010. All rights reserved. Contents DESCRIBING WINDOWS COMMUNICATION FOUNDATION...
OpenSSO: Simplify Your Single-Sign-On Needs. Sang Shin Java Technology Architect Sun Microsystems, inc. javapassion.com
OpenSSO: Simplify Your Single-Sign-On Needs Sang Shin Java Technology Architect Sun Microsystems, inc. javapassion.com 1 Agenda Enterprise security needs What is OpenSSO? OpenSSO features > > > > SSO and
WebService Security. A guide to set up highly secured client-server communications using WS-Security extensions to the SOAP protocol
WebService Security A guide to set up highly secured client-server communications using WS-Security extensions to the SOAP protocol Jam Hamidi Senior Technical Analyst BCcampus, Victoria, British Columbia,
Table of Contents. iii
Metro User Guide Metro User Guide Table of Contents Preface... xii 1. Introduction to Metro... 1 1.1. Required Software... 1 1.2. What is WSIT?... 1 1.2.1. Bootstrapping and Configuration... 2 1.2.2. Message
ALF SSO: Security Framework for Tool Integration. Brian Carroll, Eclipse ALF Project Lead bcarroll@serena.com
ALF SSO: Security Framework for Tool Integration Brian Carroll, Eclipse ALF Project Lead bcarroll@serena.com 2008 by Brian Carroll, Serena; made available under the EPL v1.0 March 2008 ALF: Is About Process
Securing Web Services From Encryption to a Web Service Security Infrastructure
Securing Web Services From Encryption to a Web Service Security Infrastructure Kerberos WS-Security X.509 TLS Gateway OWSM WS-Policy Peter Lorenzen WS-Addressing Agent SAML Policy Manager Technology Manager
The Primer: Nuts and Bolts of Federated Identity Management
The Primer: Nuts and Bolts of Federated Identity Management Executive Overview For any IT department, it is imperative to understand how your organization can securely manage and control users identities.
The Identity Metasystem: A User-Centric, Inclusive Web Authentication Solution
The Identity Metasystem: A User-Centric, Inclusive Web Authentication Solution Position paper for the W3C Workshop on Transparency and Usability of Web Authentication New York City, March 2006 Michael
An Oracle White Paper Dec 2013. Oracle Access Management Security Token Service
An Oracle White Paper Dec 2013 Oracle Access Management Security Token Service Disclaimer The following is intended to outline our general product direction. It is intended for information purposes only,
Flexible Identity Federation
Flexible Identity Federation Quick start guide version 1.0.1 Publication history Date Description Revision 2015.09.23 initial release 1.0.0 2015.12.11 minor updates 1.0.1 Copyright Orange Business Services
Biometric Single Sign-on using SAML Architecture & Design Strategies
Biometric Single Sign-on using SAML Architecture & Design Strategies Ramesh Nagappan Java Technology Architect Sun Microsystems Ramesh.Nagappan@sun.com 1 Setting Expectations What you can take away! Understand
Evaluation of different Open Source Identity management Systems
Evaluation of different Open Source Identity management Systems Ghasan Bhatti, Syed Yasir Imtiaz Linkoping s universitetet, Sweden [ghabh683, syeim642]@student.liu.se 1. Abstract Identity management systems
T-Check in Technologies for Interoperability: Web Services and Security Single Sign-On
T-Check in Technologies for Interoperability: Web Services and Security Single Sign-On Lutz Wrage Soumya Simanta Grace A. Lewis Saul Jaspan December 2007 TECHNICAL NOTE CMU/SEI-2008-TN-026 Integration
e-filing Secure Web Service User Manual
e-filing Secure Web Service User Manual Page1 CONTENTS 1 BULK ITR... 6 2 BULK PAN VERIFICATION... 9 3 GET ITR-V BY TOKEN NUMBER... 13 4 GET ITR-V BY ACKNOWLEDGMENT NUMBER... 16 5 GET RETURN STATUS... 19
Lesson 4. An survey of the impact on and use of Web Services in the industry today. Industry 4.1. Industry. 2004 SkillBuilders, Inc. V1.
Industry 4.1 Lesson 4 Industry An survey of the impact on and use of Web Services in the industry today. SKILLBUILDERS Industry 4.2 4.2 Lesson Objectives What companies are using it? Popular SOAP Implementations.NET
The Primer: Nuts and Bolts of Federated Identity Management
The Primer: Nuts and Bolts of Federated Identity Management Overview For any IT department, it is imperative to understand how your organization can securely manage and control users identities. With so
Securing Java Web Services
Securing Java Web Services Version 5.0 Instructor s Guide Overview The industry has been grappling with the problem of security for web services for several years. There has been a great deal of progress,
This project was supported by Grant No. 2009-DB-BX-K105 awarded by the Bureau of Justice, Office of Justice Programs in collaboration with the U.S.
This project was supported by Grant No. 2009-DB-BX-K105 awarded by the Bureau of Justice, Office of Justice Programs in collaboration with the U.S. Department of Justice s Global Justice Information Sharing
Software Design Document Securing Web Service with Proxy
Software Design Document Securing Web Service with Proxy Federated Access Manager 8.0 Version 0.3 Please send comments to: dev@opensso.dev.java.net This document is subject to the following license: COMMON
Agenda. How to configure
dlaw@esri.com Agenda Strongly Recommend: Knowledge of ArcGIS Server and Portal for ArcGIS Security in the context of ArcGIS Server/Portal for ArcGIS Access Authentication Authorization: securing web services
JOHN KNEILING APRIL 3-5, 2006 APRIL 6-7, 2006 RESIDENZA DI RIPETTA - VIA DI RIPETTA, 231 ROME (ITALY)
TECHNOLOGY TRANSFER PRESENTS JOHN KNEILING CREATING XML AND WEB SERVICES SOLUTIONS SECURING THE WEB SERVICES ENVIRONMENT APRIL 3-5, 2006 APRIL 6-7, 2006 RESIDENZA DI RIPETTA - VIA DI RIPETTA, 231 ROME
ACADEMIC RESEARCH INTEGRATION SYSTEM
ACADEMIC RESEARCH INTEGRATION SYSTEM Iulia SURUGIU 1 PhD Candidate, University of Economics, Bucharest, Romania E-mail: : iulia_surugiu2003@yahoo.com Manole VELICANU PhD, University Professor, Department
Lecture Notes course 02267 Software Development of Web Services
Lecture Notes course 02267 Software Development of Web Services Hubert Baumeister huba@dtu.dk Fall 2014 Contents 1 Web Service Coordination 1 1.1 What is Coordination.........................................
Interoperable Provisioning in a Distributed World
Interoperable Provisioning in a Distributed World Mark Diodati, Burton Group Ramesh Nagappan, Sun Microsystems Sampo Kellomaki, SymLabs 02/08/07 IAM 302 Contacts Mark Diodati (mdiodati@burtongroup.com)
Les technologies de gestion de l identité
Commission Identité Numérique Groupe de travail Gestion des identités Les technologies de gestion de l identité ATELIER 1 Paul TREVITHICK, CEO de Parity Responsable projet Higgins Président Fondation Infocard
000-371. Web Services Development for IBM WebSphere Application Server V7.0. Version: Demo. Page <<1/10>>
000-371 Web Services Development for IBM WebSphere Application Server V7.0 Version: Demo Page 1. Which of the following business scenarios is the LEAST appropriate for Web services? A. Expanding
Stronger Authentication with Biometric SSO
Stronger Authentication with Biometric SSO using OpenSSO Enterprise and BiObex TM Ramesh Nagappan Sun Microsystems, Burlington, MA ramesh.nagappan@sun.com http://www.coresecuritypatterns.com/blogs Setting
WEB SERVICES SECURITY
WEB SERVICES SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part without
SAP NetWeaver Single Sign-On. Product Management SAP NetWeaver Identity Management & Security June 2011
NetWeaver Single Sign-On Product Management NetWeaver Identity Management & Security June 2011 Agenda NetWeaver Single Sign-On: Solution overview Key benefits of single sign-on Solution positioning Identity
Enhancing User Authentication in Claim-Based Identity Management
Enhancing User Authentication in Claim-Based Identity Management Waleed A. Alrodhan and Chris J. Mitchell Information Security Group Royal Holloway, University of London {W.A.Alrodhan, C.Mitchell}@rhul.ac.uk
24 BETTER SOFTWARE MARCH 2008 www.stickyminds.com
veer images 24 BETTER SOFTWARE MARCH 2008 www.stickyminds.com Web services the foundation of today s service-oriented architecture (SOA) are self-contained, modular applications that can be described,
SCUR203 Why Do We Need Security Standards?
SCUR203 Why Do We Need Security Standards? Cristina Buchholz Product Security, SAP Learning Objectives As a result of this workshop, you will be able to: Recognize the need for standardization Understand
Avoiding Web Services Chaos with WebSphere Service Registry and Repository
IBM Software Group Avoiding Web s Chaos with WebSphere Registry and Repository David Buchanan David Ben Buchanan J Briden Consulting IT Specialist Consulting IT IT Specialist WebSphere Software WebSphere
Choose an IBM WebSphere Application Server configuration to suit your business needs
IBM is the industry s market leading foundation for building, deploying, reusing, integrating and managing applications and services Choose an IBM configuration to suit your business needs Highlights Unparalleled
Introduction to CASA: An Open Source Composite Application Editor
B S X Introduction to CASA: An Open Source Composite Application Editor Tientien Li, Ph.D. and Jun Qian Sun Microsystems, Inc. TS-8683 2007 JavaOne SM Conference Session TS-8683 Introduction to CASA An
Single Sign On. SSO & ID Management for Web and Mobile Applications
Single Sign On and ID Management Single Sign On SSO & ID Management for Web and Mobile Applications Presenter: Manish Harsh Program Manager for Developer Marketing Platforms of NVIDIA (Visual Computing
Digital Identity and Identity Management Technologies.
I. Agudo, Digital Identity and Identity Management Technologies, UPGRADE - The European Journal of the Informatics Professional, vol. 2010, pp. 6-12, 2010. NICS Lab. Publications: https://www.nics.uma.es/publications
Web Services in WebSphere: An Overview of the Feature Pack for Web Services
Web Services in WebSphere: An Overview of the Feature Pack for Web Services Greg Truty STSM, WebSphere Web Services Architect SWG co-chair WS-* Strategy gtruty@us.ibm.com Objective The session will cover
New Single Sign-on Options for IBM Lotus Notes & Domino. 2012 IBM Corporation
New Single Sign-on Options for IBM Lotus Notes & Domino 2012 IBM Corporation IBM s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM s sole
Federated Identity in the Enterprise
www.css-security.com 425.216.0720 WHITE PAPER The proliferation of user accounts can lead to a lowering of the enterprise security posture as users record their account information in order to remember
Improving performance for security enabled web services. - Dr. Colm Ó héigeartaigh
Improving performance for security enabled web services - Dr. Colm Ó héigeartaigh Agenda Introduction to Apache CXF WS-Security in CXF 3.0.0 Securing Attachments in CXF 3.0.0 RS-Security in CXF 3.0.0 Some
Towards an Open Identity Infrastructure with OpenSSO. RMLL Nantes July 10 2009. Fulup Ar Foll Master Architect fulup@sun.com
Towards an Open Identity Infrastructure with OpenSSO RMLL Nantes July 10 2009 Fulup Ar Foll Master Architect fulup@sun.com 1 Towards an Open Identity Infrastructure with OpenSSO OpenSSO Overview > Integration
CICS Web Service Security. Anthony Papageorgiou IBM CICS Development March 13, 2012 Session: 10282
Web Service Security Anthony Papageorgiou IBM Development March 13, 2012 Session: 10282 Agenda Web Service Support Overview Security Basics and Terminology Pipeline Security Overview Identity Encryption
Web Services Technologies Examples from the Mainstream
Web Services Technologies Examples from the Mainstream Alessandro Ricci a.ricci@unibo.it june 2009 Outline Brief overview of the architecture of two main Web Service stack implementations Java Metro Apache
OpenSSO: Cross Domain Single Sign On
OpenSSO: Cross Domain Single Sign On Version 0.1 History of versions Version Date Author(s) Changes 0.1 11/30/2006 Dennis Seah Contents Initial Draft. 1 Introduction 1 2 Single Domain Single Sign-On 2
Web Service Testing. SOAP-based Web Services. Software Quality Assurance Telerik Software Academy http://academy.telerik.com
Web Service Testing SOAP-based Web Services Software Quality Assurance Telerik Software Academy http://academy.telerik.com The Lectors Snejina Lazarova Product Manager Talent Management System Dimo Mitev
Microsoft and Novell - A Case Study in Identity Federation
Boosting interoperability and collaboration across mixedtechnology environments Standards-based identity federation solutions from Microsoft and Novell May 2009 Executive summary Despite remarkable gains
Secure the Web: OpenSSO
Secure the Web: OpenSSO Sang Shin, Technology Architect Sun Microsystems, Inc. javapassion.com Pat Patterson, Principal Engineer Sun Microsystems, Inc. blogs.sun.com/superpat 1 Agenda Need for identity-based
Trends in Information Management (TRIM) ISSN: 0973-4163 10 (1), pp. 40-50
Trends in Information Management (TRIM) ISSN: 0973-4163 10 (1), pp. 40-50 An Analytical Review of Quality Attributes of Service-Oriented Architecture Parminder Kaur Hardeep Sing Abstract Purpose: Service-Oriented
Open Source Identity Integration with OpenSSO
Open Source Identity Integration with OpenSSO April 19, 2008 Pat Patterson Federation Architect pat.patterson@sun.com blogs.sun.com/superpat Agenda Web Access Management > The Problem > The Solution >
Securely Managing and Exposing Web Services & Applications
Securely Managing and Exposing Web Services & Applications Philip M Walston VP Product Management Layer 7 Technologies Layer 7 SecureSpan Products Suite of security and networking products to address the
Gabriel Magariño. Software Engineer. gabriel.magarino@gmail.com. www.javapassion.com/idm. Overview Revisited
Gabriel Magariño Software Engineer gabriel.magarino@gmail.com www.javapassion.com/idm Overview Revisited Disclaimer and Acknowledgments The contents here are created as a own personal endeavor and thus
The Global Justice Reference Architecture (JRA) Web Services Service Interaction Profile
The Global Justice Reference Architecture (JRA) Web Services Service Interaction Profile V 1.1 by The Global Infrastructure/Standards Working Group August 1, 2007 Table of Contents Acknowledgements...
Biometric Single Sign-on using SAML
Biometric Single Sign-on using SAML Architecture & Design Strategies Ramesh Nagappan CISSP Ramesh.Nagappan@sun.com 1 Setting Expectations What you can take away! Understand the importance of Single Sign-On
Server based signature service. Overview
1(11) Server based signature service Overview Based on federated identity Swedish e-identification infrastructure 2(11) Table of contents 1 INTRODUCTION... 3 2 FUNCTIONAL... 4 3 SIGN SUPPORT SERVICE...
000-371. Web Services Development for IBM WebSphere App Server V7.0 Exam. http://www.examskey.com/000-371.html
IBM 000-371 Web Services Development for IBM WebSphere App Server V7.0 Exam TYPE: DEMO http://www.examskey.com/000-371.html Examskey IBM 000-371 exam demo product is here for you to test the quality of
Web Services and Service Oriented Architectures. Thomas Soddemann, RZG
Web Services and Service Oriented Architectures, RZG Delaman Workshop 2004 Overview The Garching Supercomputing Center - RZG Diving into the world of Web Services Service Oriented Architectures And beyond
Service Virtualization: Managing Change in a Service-Oriented Architecture
Service Virtualization: Managing Change in a Service-Oriented Architecture Abstract Load balancers, name servers (for example, Domain Name System [DNS]), and stock brokerage services are examples of virtual
Federation Proxy for Cross Domain Identity Federation
Proxy for Cross Domain Identity Makoto Hatakeyama NEC Corporation, Common Platform Software Res. Lab. 1753, Shimonumabe, Nakahara-Ku, Kawasaki, Kanagawa 211-8666, Japan +81-44-431-7663 m-hatake@ax.jp.nec.com
SAML and OAUTH Technologies WebSphere Application Server
SAML and OAUTH Technologies WebSphere Application Server Bill O'Donnell STSM WebSphere Foundation Security Architect Session TAW-1701 Session TAW-1698 Please Note IBM s statements regarding its plans,
IDENTITY INFORMATION MANAGMENT ARCHITECTURE SUMMARY Architecture and Standards Branch Office of the CIO Province of BC People Collaboration Innovation
IDENTITY INFORMATION MANAGMENT ARCHITECTURE SUMMARY Architecture and Standards Branch Author: Creation Date: Last Updated: Version: I. Bailey May 28, 2008 March 23, 2009 0.7 Reviewed By Name Organization
Dimension Technology Solutions Team 2
Dimension Technology Solutions Team 2 emesa Web Service Extension and iphone Interface 6 weeks, 3 phases, 2 products, 1 client, design, implement - Presentation Date: Thursday June 18 - Authors: Mark Barkmeier
Identity Management in Liferay Overview and Best Practices. Liferay Portal 6.0 EE
Identity Management in Liferay Overview and Best Practices Liferay Portal 6.0 EE Table of Contents Introduction... 1 IDENTITY MANAGEMENT HYGIENE... 1 Where Liferay Fits In... 2 How Liferay Authentication
Making Reliable Web Services Message Exchanges Secure and Tamper Proof. Alan J Weissberger. Data Communications Technology. aweissberger@sbcglobal.
Making Reliable Web Services Message Exchanges Secure and Tamper Proof Alan J Weissberger Data Communications Technology aweissberger@sbcglobal.net I. Composability of WS Reliability with WS Security IBM,
Web Service Security Vulnerabilities and Threats in the Context of WS-Security
Web Service Security Vulnerabilities and Threats in the Context of WS-Security Jesper Holgersson Eva Söderström University of Skoevde, Sweden SIIT 2005, ITU, Geneva, September 2005 Outline of presentation
Requirement Priority Name Requirement Text Response Comment
N-Tiered Architecture Accessibility Application architecture shall consist of a minimum of four tiers: proxy, presentation, application, and data [base]. Each of the fours tiers shall be separated with
NEMSIS v3 Web Services Guide
NEMSIS TAC Whitepaper NEMSIS v3 Web Services Guide Date November 2, 2011 November 14, 2011 (FINAL) April 24, 2012 (Updated) May 09, 2012 (Updated) August 27, 2012 (updated) September 13, 2012 (updated)
Identity opens the participation age. Dr. Rainer Eschrich. Program Manager Identity Management Sun Microsystems GmbH
Identity opens the participation age Open Web Single Sign- On und föderierte SSO Dr. Rainer Eschrich Program Manager Identity Management Sun Microsystems GmbH Agenda The Identity is the Network Driving
Business Process Execution Language for Web Services
Business Process Execution Language for Web Services Second Edition An architect and developer's guide to orchestrating web services using BPEL4WS Matjaz B. Juric With Benny Mathew and Poornachandra Sarang
Identity Server Guide Access Manager 4.0
Identity Server Guide Access Manager 4.0 June 2014 www.netiq.com/documentation Legal Notice THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF
Federated Identity and Single Sign-On using CA API Gateway
WHITE PAPER DECEMBER 2014 Federated Identity and Single Sign-On using Federation for websites, Web services, APIs and the Cloud K. Scott Morrison VP Engineering and Chief Architect 2 WHITE PAPER: FEDERATED
SPML (Service Provisioning Markup Language) and the Importance of it within the Security Infrastructure Framework for ebusiness
Interoperability Summit 2002 SPML (Service Provisioning Markup Language) and the Importance of it within the Security Infrastructure Framework for ebusiness Gavenraj Sodhi Senior Technology Analyst Provisioning