>>Return to the Compare IBM DataPower Site

The XACML Enabled Gateway – The Entrance to a New SOA Ecosystem
Joint Axiomatics & Intel White Paper

SOA governance is becoming increasingly important to secure ROI. The recent release of the OpenGroup's OSIMM model for Service Integration Maturity is a symptomatic and valuable contribution. For organizations striving to boost performance while enabling centralized policy enforcement in service deployments, XML security gateways offer great opportunities. XACML represents another important solution. This new standard for access control plays an important role in SOA deployments aiming at higher levels of maturity as outlined by OSIMM. An XML security gateway and an XACML based solution combined establish a whole new set of opportunities to enhance security, administration and performance in deployed services. In this paper, Intel and Axiomatics present a joint conceptual solution where the Intel SOA Expressway SOA soft-appliance security gateway is used in conjunction with Axiomatics Policy Server for XACML based access control. Together these products provide a very strong value proposition for service oriented architectures. Topics include:

• Overview of authorization, entitlements, and the security gateway deployment patterns
• Enrichment of authorization decisions with dynamic ABAC
• Evolution from static to context aware authorization rules
• Issues with cross-domain authorization policies
• XACML models for the cloud-combining delegated AuthN with local AuthZ
• Examination of vertical use cases including defense, financial, and healthcare