Welcome Pat G. Cappelaere President / CEO Vightel Corporation Session Title: Workflows, Identity 2.0 & Delegated Authorization

The RESTFul Way April 21-23, 2008 Renaissance Washington, DC 安らぎの道

SOA Journey: Two Paths

WOA April 21-23, 2008 Renaissance Washington, DC Focused on Describing Operations

WOA

ROA April 21-23, 2008 Renaissance Washington, DC Focused on Resources Of Value to A User

ROA

ROA

WOA

April 21-23, 2008 Renaissance Washington, DC

April 21-23, 2008 Renaissance Washington, DC

April 21-23, 2008 Renaissance Washington, DC

REST + APP + …

I cannot drink zis!

http://host/R

C R U D

Business Case Workflows, Identity 2.0 & Delegated Authorization

Who Is The Customer?

Science DoD Red Cross/First Responders

Web Services Access

What Does Our Customer Really Want? Flood . . . . .

Flood

Science DoD Red Cross/First Responders

Security Problems Manage Users Authenticate/Authorize Control Access Delegate User Authority To Workflows And Still Need Fairly Secure Transactions

Manage Users

Authenticate/Authorize

Control Access

Delegate User Authority To Workflows

And Still Need Fairly Secure Transactions

WfCS Issues Standardize API in a RESTFul Way Discover Workflows Many Workflow Engines!

Standardize API in a RESTFul Way

Discover Workflows

Identity 2.0 Delegate User Identity to Trusted Identity Providers Provides Single Sign-on Across Enterprise Provides Profile Exchange Capabilities Benefits : Simplify Password Management Accept Users From Specific Communities of Interest Derive Access Privileges From Exchanged Profile RESTFul Minimum Infrastructure Requirement April 21-23, 2008 Renaissance Washington, DC Dick Hardt, Founder & CEO, Sxip Identity

Delegate User Identity to Trusted Identity Providers

Provides Single Sign-on Across Enterprise

Provides Profile Exchange Capabilities

Benefits :

Simplify Password Management

Accept Users From Specific Communities of Interest

Derive Access Privileges From Exchanged Profile

RESTFul

Minimum Infrastructure Requirement

Web Services Secure Communications Basic Authentication SSL / PKI OAuth 1.0 And User Pre-Approved Transactions Web Consumer Web Provider Web Consumer Web Provider

Basic Authentication

SSL / PKI

OAuth 1.0

And User Pre-Approved Transactions

OAuth 1.0 Uses HTTP Authentication Header April 21-23, 2008 Renaissance Washington, DC http://oauth.net/ POST http://eo1.geobliki.com/sps HTTP/1.1 Connection: close Accept: */* Content-Type: application/x-www-form-urlencoded Authorization: OAuth realm="/geobliki/sps", oauth_nonce="DknhjM5kkvhS1yT8dWgjTXzG3D8CpUQpd1c5zDx16cw", oauth_signature_method="HMAC-SHA1", oauth_token="http%3A%2F%2Fcappelaere.pip.verisignlabs.com%2F", oauth_timestamp="1206048828", oauth_consumer_key="test", oauth_signature="8N2tOq6KEj%2FSWCjDHs63ncYNVO8%3D", oauth_version="1.0" Content-Length: 1041 Host: eo1.geobliki.com

Uses HTTP Authentication Header

Web Service Orchestration Workflow Engine BPMN, XPDL… But You Want To Keep it Simple For Your Service Provider Partners For Yourself RESTFul Web Services Including Engine Itself April 21-23, 2008 Renaissance Washington, DC

Workflow Engine

BPMN, XPDL…

But You Want To Keep it Simple

For Your Service Provider Partners

For Yourself

RESTFul Web Services Including Engine Itself

Workflow Reference Model From SOAPy WfXML 2.0 to WfXML-R

Putting it Together

Applications GEO/GEOSS, CEOS, IFRC South Africa Wild Fires Monitoring (fire) Mozambique Floods (flood) Southern California Fires (fire) Empire Challenge 08 (red dye, ships, fire) April 21-23, 2008 Renaissance Washington, DC

GEO/GEOSS, CEOS, IFRC

South Africa Wild Fires Monitoring (fire)

Mozambique Floods (flood)

Southern California Fires (fire)

Empire Challenge 08 (red dye, ships, fire)

Workflow Discovery CS/W Is Now An Automated Feed Aggregator

Lessons Learned Security is achievable using existing standards Workflows Can Be Discovered Easily! Everything is a Workflow ! April 21-23, 2008 Renaissance Washington, DC

Security is achievable using existing standards

Workflows Can Be Discovered Easily!

Everything is a Workflow !

Thank You! Pat G. Cappelaere President / CEO Vightel Corporation http://www.vightel.com Contact Information: 443 283 0369 [email_address] April 21-23, 2008 Renaissance Washington, DC

Pat G. Cappelaere

President / CEO

Vightel Corporation

http://www.vightel.com

Contact Information:

443 283 0369

[email_address]