Service-Oriented Architectures offer a number of potential benefits: They can
provide new opportunities to connect enterprises with customers, partners,
and suppliers; improve efficiency through greater reuse of services across
the enterprise; and offer greater flexibility by breaking down IT silos. But
these benefits make security more critical than ever. Why? Services are
highly distributed, multi-owner, deployed to heterogeneous platforms, and
often accessible across departments and enterprises - and this creates major
security issues for developers, architects, and security and operations
professionals. Fortunately, there are ways to make your SOA more secure. If
you're building applications to SOA using J2EE, BPEL, or XML, you can build
security into an SOA by addr... (more)
One of the challenges IT organizations face is how to propagate identities in
complex business processes that are commonly found in Service Oriented
Architectures (SOAs). Identities, which are passed from one service
invocation to the next in a business process, give the process a user
context. Identities can be used to determine access rights to SOA services
and for audit and compliance... (more)