SOA Pattern : Policy Centralization
•
4 likes•1,514 views
This document discusses policy centralization patterns. It introduces Suresh Atanayake and Umesha Gunasinghe who will present. WSO2 is described as an open source platform provider. The importance of policies for organizations and services is discussed. The policy centralization pattern advocates defining and maintaining policies in a centralized location to promote reuse and consistency. Examples are provided of using WS-Policy and XACML policies with WSO2 middleware.
More Related Content
What's hot
What's hot (20)
Similar to SOA Pattern : Policy Centralization
Similar to SOA Pattern : Policy Centralization (20)
More from WSO2
More from WSO2 (20)
Recently uploaded
Recently uploaded (20)
SOA Pattern : Policy Centralization
- 1. SOA Pa)ern: Policy Centraliza8on Suresh A)anayake Senior Solu*ons Engineer Umesha Gunasinghe Solu*ons Engineer
- 2. 2 About the Presenter(s) ๏ Umesha Gunasinghe Umesha is a Solu8ons Engineer from Solu8ons Architecture team at WSO2. She holds a first-‐class honors degree in Compu8ng from Staffordshire University, UK. As part of her final-‐year research project, she developed a web-‐based ar8ficial intelligence cha)erbot system. ๏ Suresh A0anayake Suresh is a Senior Solu8ons Engineer from Solu8ons Architecture team and former Iden8ty Server team member. He is an in house expert in Iden8ty and Access Management technologies and have been involved with various WSO2 customer projects .
- 3. 3 About WSO2 ๏ Global enterprise, founded in 2005 by acknowledged leaders in XML, web services technologies, standards and open source ๏ Provides only open source plaXorm-‐as-‐a-‐service for private, public and hybrid cloud deployments ๏ All WSO2 products are 100% open source and released under the Apache License Version 2.0. ๏ Is an Ac8ve Member of OASIS, Cloud Security Alliance, OSGi Alliance, AMQP Working Group, OpenID Founda8on and W3C. ๏ Driven by Innova8on ๏ Launched first open source API Management solu8on in 2012 ๏ Launched App Factory in 2Q 2013 ๏ Launched Enterprise Store and first open source Mobile solu8on in 4Q 2013
- 4. 4 What WSO2 delivers
- 5. Importance of Policies In an organiza8on there can be set of rules defined around the services exposed by them. These service accessible rules are interpreted as policies. A service can be linked with either one or more policies. 5
- 6. Policies for web services ๏ XACML policies Providing authoriza8on properly for a certain service is an important aspect of any system. XACML is the de-‐ facto standard for authoriza8on which we can define policies in such a way that it will focus on giving consumers the accessibility with fine level granularity. ๏ WS-‐Policies / Thro)ling Policies WS-‐ Policies is an XML based specifica8on which defines how certain services can be consumed with regards to security , quality of service etc. Thro)ling policies can be used to restrict the resource access on number of requests coming from the user. 6
- 7. Maintaining Policies ๏ Problems ๏ Maintaining over the 8me ๏ Increase of services ๏ Redundancy ๏ Inconsistency ๏ Performance Overhead 7
- 8. Policy Centraliza8on Pa)ern Policy centraliza8on pa)ern recommends that we keep the policies as reusable defining only once and maintaining these policies centrally which we can be shared among several services. 2 Key areas that emphasizes by the pa)ern:-‐ 1. Centralized Policies 2. Normaliza8on of policies 8
- 9. Policy Defini8ons 9 Organization Policy Service Level Policy
- 10. Centralized Policy Governance ๏ Central Policy Store ๏ Centralized Governance ๏ Easy maintenance over8me 10
- 11. Policy Centraliza8on and Governance with WSO2 ๏ Security Policies with WSO2 middleware stack ๏ WS – Policy – WSO2 ESB, WSO2 AS ๏ XACML Policies – WSO2 Iden8ty Server ๏ Policy Governance – WSO2 Governance Registry 11
- 12. Use Cases 12
- 13. WS-‐ Policy with ESB 13 ESB Service A Service B WS – Policy / Throttling policy Request
- 14. XACML policies with IS 14 Service A IS G-Reg ESB PEP PDP PRP Request
- 15. Demo 15
- 18. Authen8ca8on
- 19. Authoriza8on
- 20. Centralized Authen8ca8on Policy – (WS-‐Security)
- 21. Normalized Authoriza8on Policy (XACML)
- 22. Solu8on
- 24. Scenario User Role Patient Profile Service Patient Payments Service Patient Reports Service Todd - NO NO NO Suresh Employee YES NO NO Umesha Employee Accountant YES YES NO John Employee Doctor YES NO YES
- 25. 25 More Informa8on ! ๏ Include links to product downloads, white paper downloads , etc.
- 27. Contact us !