Lecture Notes in Computer Science, 2008, Volume 5364/2008, 565-571, DOI: 10.1007/978-3-540-89652-4_47

Integrated Security Context Management of Web Components and Services in Federated Identity Environments

Apurva Kumar

View Related Documents

Abstract

The problem of providing unified web security management in an environment with multiple autonomous security domains is considered. Security vendors provide separate security management solutions for cross-domain browser based and web service based interactions. This is partly due to the fact that different web standards dominate in each space. E.g. Security Assertion Markup Language (SAML) which is an important standard in cross domain single sign on (SSO) specializes in browser based access while WS-* standards focus on security needs of web services. However, cross domain web services are often invoked in context of a secure browser session. Considering these interactions in isolation will lead to a fractured security solution. This paper proposes a solution that provides seamless transfer of security context across various types of cross-domain web interactions.

Fulltext Preview

Image of the first page of the fulltext document