An open source Identity & Entitlement management server NBQSA ~ 2011
Authentication An open source Identity & Entitlement management server LDAP AD JDBCNBQSA ~ 2011
Authentication NBQSA ~ 2011
Authentication Single Sign On An open source Identity & Entitlement management server SAML2 KerberosNBQSA ~ 2011
Single Sign On NBQSA ~ 2011
Provisioning Authentication Single Sign On An open source Identity & Entitlement management server SPML SCIMNBQSA ~ 2011
Provisioning NBQSA ~ 2011
Provisioning Authentication Single Sign On An open source Identity & Entitlement management server Auditing XDASNBQSA ~ 2011
Auditing NBQSA ~ 2011
Provisioning Authentication Single Sign On An open source Identity & Entitlement management server Auditing Delegation WS-TRUSTNBQSA ~ 2011
Delegation NBQSA ~ 2011
Provisioning Authentication Single Sign On An open source Identity & Entitlement management server Federation Auditing Delegation SAML2 WS-TRUSTNBQSA ~ 2011
Federation NBQSA ~ 2011
Role Based Access Control An open source Identity & Entitlement management server NBQSA ~ 2011
Attribute Based Access Control Role Based Access Control An open source Identity & Entitlement management server NBQSA ~ 2011
Attribute Based Access Control Role Based Access Control An open source Identity & Entitlement management server Policy Based Access Control XACMLNBQSA ~ 2011
Attribute Based Access Control Role Based Access Control An open source Identity & Entitlement management server SOAP Policy Based Access Control XACML / WS-XACMLNBQSA ~ 2011
Attribute Based Access Control Role Based Access Control REST An open source Identity & Entitlement management server SOAP Policy Based Access Control XACMLNBQSA ~ 2011
An open source Identity & Entitlement management server Web based management consoleNBQSA ~ 2011
An open source Identity & Entitlement management server SOAP based API Web based management consoleNBQSA ~ 2011
¡ User stores with LDAP/AD/JDBC ¡ OpenID ¡ SAML2 ¡ Kerberos ¡ Information Cards ¡ XACML ¡ OAuth ¡ Security Token Service with WS-‐Trust NBQSA ~ 2011
¡ SCIM ¡ XDAS ¡ WS-‐XACML NBQSA ~ 2011
NBQSA ~ 2011
¡ Open source & open standards ¡ Lean ¡ No vendor lock-‐in ¡ All in a single product ¡ Interoperability ¡ Extensibility ¡ The power of WSO2 SOA stack ¡ Short learning curve NBQSA ~ 2011
¡ Decentralized Single Sign On ¡ Single user profile ¡ Widely used for community & collaboration aspects ¡ Multifactor Authentication [Infocard, XMPP] ¡ OpenID relying party components NBQSA ~ 2011
¡ Single Sign On / Single Logout ¡ Widely used *aaS providers [Google Apps, Salesforce] ¡ SAML2 Web SSO Profile ¡ Used in WSO2 StratosLive NBQSA ~ 2011
¡ Key Distribution Center [KDC] NBQSA ~ 2011
¡ The de-‐facto standard for authorization ¡ Support for multiple PIPs ¡ Policy distribution ¡ Decision / Attribute caching ¡ UI wizard for defining policies ¡ Notifications on policy updates ¡ TryIt tool NBQSA ~ 2011
EntitlementService EntitlementPolicyAdminService SOAP SOAP Attribute Finder Policy Decision Point Extensions Decision Policy Extensions Administration Cache Attribute Point Cache XACML Engine Default Finder Policy Cache LDAPNBQSA ~ 2011
NBQSA ~ 2011
NBQSA ~ 2011
NBQSA ~ 2011
¡ Identity Delegation ¡ Securing RESTful services ¡ 2-‐legged & 3-‐legged OAuth ¡ XACML integration with OAuth ¡ OAuth 2.0 support in progress NBQSA ~ 2011
永奎 吴
