Workflows, Identity 2.0 & Delegated Authorization using REST
Upcoming SlideShare
Loading in...5
×
 

Workflows, Identity 2.0 & Delegated Authorization using REST

on

  • 3,359 views

 

Statistics

Views

Total Views
3,359
Views on SlideShare
3,347
Embed Views
12

Actions

Likes
1
Downloads
60
Comments
0

1 Embed 12

http://www.slideshare.net 12

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Workflows, Identity 2.0 & Delegated Authorization using REST Workflows, Identity 2.0 & Delegated Authorization using REST Presentation Transcript

  • Welcome Pat G. Cappelaere President / CEO Vightel Corporation Session Title: Workflows, Identity 2.0 & Delegated Authorization
  • The RESTFul Way April 21-23, 2008 Renaissance Washington, DC 安らぎの道
  • SOA Journey: Two Paths
    • WOA
    April 21-23, 2008 Renaissance Washington, DC Focused on Describing Operations
    • ROA
    April 21-23, 2008 Renaissance Washington, DC Focused on Resources Of Value to A User
  • ROA
  • WOA
  • April 21-23, 2008 Renaissance Washington, DC
  • April 21-23, 2008 Renaissance Washington, DC
  • April 21-23, 2008 Renaissance Washington, DC
  • REST + APP + …
  • I cannot drink zis!
  •  
  • http://host/R
  • C R U D
  • Business Case Workflows, Identity 2.0 & Delegated Authorization
  • Who Is The Customer?
  • Science DoD Red Cross/First Responders
  • Web Services Access
  • What Does Our Customer Really Want? Flood . . . . .
  • Flood
  • Science DoD Red Cross/First Responders
  • Security Problems
    • Manage Users
    • Authenticate/Authorize
    • Control Access
    • Delegate User Authority To Workflows
    • And Still Need Fairly Secure Transactions
  • WfCS Issues
    • Standardize API in a RESTFul Way
    • Discover Workflows
    Many Workflow Engines!
  • Identity 2.0
    • Delegate User Identity to Trusted Identity Providers
    • Provides Single Sign-on Across Enterprise
    • Provides Profile Exchange Capabilities
    • Benefits :
    • Simplify Password Management
    • Accept Users From Specific Communities of Interest
    • Derive Access Privileges From Exchanged Profile
    • RESTFul
    • Minimum Infrastructure Requirement
    April 21-23, 2008 Renaissance Washington, DC Dick Hardt, Founder & CEO, Sxip Identity
  •  
  • Web Services Secure Communications
    • Basic Authentication
    • SSL / PKI
    • OAuth 1.0
    • And User Pre-Approved Transactions
    Web Consumer Web Provider Web Consumer Web Provider
  • OAuth 1.0
    • Uses HTTP Authentication Header
    April 21-23, 2008 Renaissance Washington, DC http://oauth.net/ POST http://eo1.geobliki.com/sps HTTP/1.1 Connection: close Accept: */* Content-Type: application/x-www-form-urlencoded Authorization: OAuth realm="/geobliki/sps", oauth_nonce="DknhjM5kkvhS1yT8dWgjTXzG3D8CpUQpd1c5zDx16cw", oauth_signature_method="HMAC-SHA1", oauth_token="http%3A%2F%2Fcappelaere.pip.verisignlabs.com%2F", oauth_timestamp="1206048828", oauth_consumer_key="test", oauth_signature="8N2tOq6KEj%2FSWCjDHs63ncYNVO8%3D", oauth_version="1.0" Content-Length: 1041 Host: eo1.geobliki.com
  • Web Service Orchestration
    • Workflow Engine
    • BPMN, XPDL…
    • But You Want To Keep it Simple
    • For Your Service Provider Partners
    • For Yourself
    • RESTFul Web Services Including Engine Itself
    April 21-23, 2008 Renaissance Washington, DC
  • Workflow Reference Model From SOAPy WfXML 2.0 to WfXML-R
  • Putting it Together
  • Applications
    • GEO/GEOSS, CEOS, IFRC
    • South Africa Wild Fires Monitoring (fire)
    • Mozambique Floods (flood)
    • Southern California Fires (fire)
    • Empire Challenge 08 (red dye, ships, fire)
    April 21-23, 2008 Renaissance Washington, DC
  • Workflow Discovery CS/W Is Now An Automated Feed Aggregator
  • Lessons Learned
    • Security is achievable using existing standards
    • Workflows Can Be Discovered Easily!
    • Everything is a Workflow !
    April 21-23, 2008 Renaissance Washington, DC
  • Thank You!
    • Pat G. Cappelaere
    • President / CEO
    • Vightel Corporation
    • http://www.vightel.com
    • Contact Information:
    • 443 283 0369
    • [email_address]
    April 21-23, 2008 Renaissance Washington, DC