Close
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Menu
Search
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications

    New Web Services Security Spec on Tap

    By
    Darryl K. Taft
    -
    July 8, 2003
    Share
    Facebook
    Twitter
    Linkedin

      Led by Microsoft Corp. and IBM, a group of companies Tuesday plans to announce a new Web services specification for handling security in Web services environments.

      At the Burton Group Inc.s Catalyst conference in San Francisco, IBM, Microsoft, BEA Systems Inc., RSA Security Inc. and VeriSign Inc. will announce the publication of the WS-Federation specification, another in a series of standards IBM and Microsoft outlined in the Web services security roadmap they co-authored last year.

      Karla Norsworthy, director of e-business technology at IBM, said WS-Federation enables developers to manage trust relationships across enterprises that use different types of security solutions.

      “Were announcing the crown jewel of the Web services security roadmap, the Web services federation specification,” Norsworthy said. “That allows you to take companies or parts of companies with very different security solutions and different trust domains… Such as one might use Kerberos and one might use user ID and password. And you can make it really easy to allow a new user who is authenticated by one domain to be able to do business across a variety of companies and their Web services without requiring either the end user to re-authenticate or requiring a lot of bureaucracy from the participating companies. So these specifications are solutions that hold together Web services security [WS-Security], Trust [WS-Trust], the security part of Policy [WS-Policy] into allowing this kind of federation so that out clients can do successful business process integration and have the security part come easy.”

      Steven VanRoekel, director of Web services at Microsoft said, “From a Microsoft perspective, this is the technology that will enable TrustBridge.” TrustBridge is Microsofts upcoming technology that will allow organizations to share user identities across business boundaries, the company said.

      “WS-Federation is built to be extensible to utilize any broad range of identification mechanisms, like Passport, like SAML [Security Assertion Markup Language] or like anything else in between,” VanRoekel said.

      Page 2

      Meanwhile IBM will integrate WS-Federation into its WebSphere and Tivoli product lines, Norsworthy said.

      In addition to the new specification, Microsoft and IBM will be demonstrating the specifications capabilities by showing two systems exchanging federated identity information across each distinct system. The example is an automotive system that involves a car dealer, an auto manufacturer and a parts dealer, Norsworthy said.

      WS-Federation “is the piece that really enables you to see how what we set up with Trust and what we set up with Web Services Security and with the security part of Policy can all work together to allow customers to configure solutions that really allow them to have unlike security systems and have them interoperate,” Norsworthy said.

      Added VanRoekel: “This is kind of a hallmark in that its a real burden that affects businesses in trying to really enable Web services to work outside the corporate boundaries is that this user information, identity information, wasnt really exchangeable in any sort of good way. So getting the real vision of Web services and heterogeneous computing, where you can have different disparate systems talking to each other… You really cant enable the advanced scenarios unless you have this technology. So I think weve reached a pretty major milestone here in delivering it.”

      Avatar
      Darryl K. Taft
      Darryl K. Taft covers the development tools and developer-related issues beat from his office in Baltimore. He has more than 10 years of experience in the business and is always looking for the next scoop. Taft is a member of the Association for Computing Machinery (ACM) and was named 'one of the most active middleware reporters in the world' by The Middleware Co. He also has his own card in the 'Who's Who in Enterprise Java' deck.

      MOST POPULAR ARTICLES

      Android

      Samsung Galaxy XCover Pro: Durability for Tough...

      Chris Preimesberger - December 5, 2020 0
      Have you ever dropped your phone, winced and felt the pain as it hit the sidewalk? Either the screen splintered like a windshield being...
      Read more
      Cloud

      Why Data Security Will Face Even Harsher...

      Chris Preimesberger - December 1, 2020 0
      Who would know more about details of the hacking process than an actual former career hacker? And who wants to understand all they can...
      Read more
      Cybersecurity

      How Veritas Is Shining a Light Into...

      eWEEK EDITORS - September 25, 2020 0
      Protecting data has always been one of the most important tasks in all of IT, yet as more companies become data companies at the...
      Read more
      Big Data and Analytics

      How NVIDIA A100 Station Brings Data Center...

      Zeus Kerravala - November 18, 2020 0
      There’s little debate that graphics processor unit manufacturer NVIDIA is the de facto standard when it comes to providing silicon to power machine learning...
      Read more
      Apple

      Why iPhone 12 Pro Makes Sense for...

      Wayne Rash - November 26, 2020 0
      If you’ve been watching the Apple commercials for the past three weeks, you already know what the company thinks will happen if you buy...
      Read more
      eWeek


      Contact Us | About | Sitemap

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Property of TechnologyAdvice.
      Terms of Service | Privacy Notice | Advertise | California - Do Not Sell My Information

      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×