WS-Security is a flexible and feature-rich extension to SOAP to apply security to web services. It is a member of the WS-* family of web service specifications and was published by OASIS.[1] Closely related to WS-Security is WS-Trust, also a WS-* specification and OASIS standard that provides extensions to WS-Security.
The following are WS-Security based products and services:
| Product Name | Project/Vendor | Description | Standards/Protocols/Functionalities | |
|---|---|---|---|---|
| CA SiteMinder / CA IDM | CA Technologies | Identity and Access management | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, Security Token Service, Single Sign-on, RBAC, ABAC | |
| EmpowerID[2] | The Dot Net Factory | Identity management | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, Security Token Service, Single Sign-on, RBAC, ABAC | |
| Fusion Middleware[3] | Oracle | Identity management | WS-Security, WS-Federation, SAML, XML, RBAC | |
| JBoss SSO[4] | JBoss | Identity management | WS-Security, WS-Trust, SAML, Single Sign-On | |
| Hitachi ID Systems[5] | Hitachi | Identity management | WS-Security, WS-Federation, Single Sign-On, SAML, XML | |
| LemonLDAP::NG[6] | LemonLDAP::NG | SSO for Web Applications | WS-Federation, CAS, OpenID-Connect, SAML-2.0, Single Sign-on | |
| Microsoft ADFS[7] | Microsoft | Federation Services | WS-Security, WS-Federation, Single Sign-on | |
| Novell Access Manager[8] | Novell | Password manager & single sign-on | WS-Security, SAML, Single Sign-on, RBAC | |
| OpenSAML[9] | Shibboleth | C++ & Java libraries | WS*-, WS-Security, WS-Addressing, WS-Trust, SAML, XACML | |
| Open-source Apache CXF[10] | Apache | Open source framework | WS*-, WS-Security, WS-Addressing, WS-Trust, SOAP, XML, RESTful HTTP | |
| Oracle Fusion Middleware[11] | Oracle | Identity management | WS-Security, WS-Federation SAML, XML, RBAC | |
| Sailpoint IdM[12] | Sailpoint | Identity management | WS-Security, WS-Federation SAML, Single Sign-on, RBAC | |
| SAP Security & IdM[13] | SAP | Security management | WS-Security, SAML, XML | |
| SecureAuth IdP[14] | SecureAuth | Adaptive Access Control | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, OpenID Connect, OpenID, CAS, Single Sign On | |
| Sentry API Security Gateway[15] | Forum Systems | API Gateway | WS-Security, WS-Trust, WS-Federation, SAML | |
| Tivoli Identity Manager[16] | IBM | Access Manager for E-business | WS-Security, WS-Federation, SAML, CAS, OpenID | |
| Ubisecure[17] | Ubisecure Solutions | Single Sign-on Service | WS-Security, WS-Federation, TUPAS, OpenID | |
| WS-Security Wrapper[18] | Source Forge | XML converter to/from SOAP with WS-Security | WS-Security, WS-Addressing, Java, XML | |
| XML Firewall[19] | Layer7Tech | XML firewall for securing cloud-based systems | WS*, WS-Security, SAML, XML, OAuth |
See also edit
References edit
- ^ Alrodhan, Waleed (2012), "Identity Management", Digital Identity and Access Management, IGI Global, pp. 329–347, doi:10.4018/978-1-61350-498-7.ch017, ISBN 978-1-61350-498-7, retrieved 2023-12-11
- ^ "EmpowerID".
- ^ "Fusion Middleware" (PDF).
- ^ "JBoss SSO".
- ^ "Fusion Middleware" (PDF).
- ^ "LemonLDAP::NG".
- ^ "MS ADFS". 6 June 2011.
- ^ "Novell Access Manager".
- ^ "OpenSAML".
- ^ "Open-Source Services Framework Apache CXF".
- ^ "Oracle Fusion Middleware" (PDF).
- ^ "Sailpoint Identity Now".
- ^ "SAP Security Manager".
- ^ "SecureAuth".
- ^ "Forum Systems".
- ^ "Tivoli Access Manager".
- ^ "Ubilogin SSO".
- ^ "WS-Security Wrapper".
- ^ "XML Firewall". 17 November 2022.