Web services pose identity management challenges

“The better idea is that you’re really supposed to separate the notion of identity of who you are from the specific system,” said Schmelzer. “You should have an identity that is separate from the portal and the ERP system and the CRM system. But somehow [those applications] have to respect that identity.”

“There is this whole area of enterprise identity management that is really burgeoning because of this context issue,” Schmelzer added.

The key to separating the notion of identity from specific systems is implementing an architecture that supports policy-driven identity management, explained Jason Bloomberg, also a senior analyst with ZapThink.

“You need to have an enterprise-wide sense of who the users are and what they’re entitled to do that cuts across different applications,” Bloomberg said. “And it has to be a way that maintains the policies that apply to those users.”

Read more at: SearchWebServices

Web services security vendors focus on access control, XML firewalls

That hasn’t changed much, as customers wait for vendors to finalize standards such as XML Key Management Specification (XKMS is for managing the keys needed to encrypt and decrypt Web services messages), says Jason Bloomberg, a senior analyst at ZapThink, an analysis and consulting firm in Waltham, Mass.

Single-point authentication and access control are important because Web services can’t make users more efficient if those users have to enter a new user ID and password each time their request hits another application. “Larger entities might have [10,000, 20,000] or 30,000 users,” says Bloomberg, each of whom might have different access rights on dozens of different systems — access rights that need to be changed, or even withdrawn, as the employee’s responsibilities change or they leave the company.

Major vendors such as Microsoft, IBM and Sun Microsystems Inc. are building Web services security into their broader product platforms. Sun “has leadership in the directory space with their Directory Server,” says Bloomberg, which is the foundation for the Sun ONE Identity Server. Microsoft has also announced plans for a technology code-named “TrustBridge,” which would allow secure authentication of users, and sharing of their user identities across business and security boundaries.

Read more at: SearchWin2000

Service Orientation Market Trends

While Web Services have been getting the attention through 2003, in 2004 the IT computing story will be focused squarely on Service Orientation. Offering an evolutionary approach to distributed computing that provides greater business agility while enabling companies to use heterogeneous resources more efficiently, Service Orientation, based on established Web Services standards, is set to fundamentally change many different IT markets as enterprises transition to Service-Oriented Architectures.

In particular, the markets of application security, security appliances, system management, application integration, data integration, and business process management are six key markets that will become transformed as vendors in those markets Service-enable their products. Furthermore, there is a window of opportunity for new entrants in each of these markets to build Service-oriented offerings. Those windows will soon close, however, as the established, incumbent vendors in each space consolidate their respective markets.

These consolidation trends will continue through the rest of the decade, as large vendors round out their suites of software that support Service Orientation, resulting in a combined market consisting of vendors offering a full-function SOA Implementation Framework. These frameworks will offer enterprises all the functionality they need to build, run, and manage SOAs. The market for SOA Implementation Frameworks is still nascent as of 2004, but will dominate the distributed computing arena by 2010.

OASIS Stamps Approval on Provisioning Standard

Previously, there was no one way to do this in a uniform manner. With SPML, companies don’t have to waste what could be millions of dollars on development work in order to get people provisioned or deprovisioned, said ZapThink Senior Analyst Ronald Schmelzer.

“What this means for companies is that as they purchase applications that require some sort of user access, they should make sure that they have a standard way of provisioning users on, and deprovisioning users from that application,” Schmelzer told internetnews.com.

“SPML will most likely work within a broader framework for enterprise-wide security infrastructure such as those provided by other standardization initiatives, such as WS-Security and WS-Policy,” he said. “WS-Security and WS-Policy are more concerned with specific user access to business logic, but there are clearly going to be cases when the two specifications will need to overlap. At the very least, any comprehensive security platform for Web Services will need to handle both of these sets of specifications — provisioning of physical and virtual assets and the access to these applications.”

Read more at: Internetnews.com

Web services ID management touted

“SPML adds to the identity management capabilities by providing a standard way in which access to these critical infrastructure resources can be granted or denied,” said analyst Ronald Schmelzer of ZapThink in Waltham, Mass. “This means that companies can build applications that have strict identity and security policies without having to do so in a proprietary and noninteroperable manner.”

“While SPML has more to do with provisioning physical access to specific resources, there is definitely potential for overlap or at least complementary offering to the WS-Security and WS-Policy specifications,” Schmelzer said.

Read more at: InfoWorld

XML shows promise, but …

Gartner predicts that the amount of XML data in corporations will grow from about 2 percent in 2000 to 60 percent by 2004. Exact numbers are hard to come by though, since, as Ronald Schmelzer, analyst for ZapThink, an XML research house, says, “XML is so persuasive that it’s already everywhere. Eventually, it will even be in dishwashers.”

Schmelzer comments that “XML is not very efficient from a processing, network, or storage” standpoint, and that its use is growing. By 2006, he says, XML traffic alone may reach 25% of corporate network traffic.

Read more at: The Register and SD Times

Service-Oriented Architecture Consulting for Enterprise End-Users

Service-Oriented Architectures (SOAs) represent an evolutionary approach to distributed computing that promises a flexible IT environment that leads to business agility. As companies look to leverage the business advantages of Web Services to address strategic business needs, they are increasingly looking to build SOAs. However, SOAs require special skills and expertise. When companies do not have such skills in-house, they turn to consultants, system integrators, and other professional services organizations.

The movement to SOAs present both opportunities and threats to consulting firms: on the one hand, there will be an increased demand for architectural consulting, business process consulting and the implementation tasks associated with building SOAs. On the other hand, as SOAs take hold and Service-oriented process solutions supplant integration solutions, the market for system integration will dry up, requiring system integrators to change their business focus.

This report analyzes the market for SO

Service-Oriented Architecture Consulting for Professional Services Organizations

Service-Oriented Architectures (SOAs) represent an evolutionary approach to distributed computing that promises a flexible IT environment that leads to business agility. As companies look to leverage the business advantages of Web Services to address strategic business needs, they are increasingly looking to build SOAs. However, SOAs require special skills and expertise. When companies do not have such skills in-house, they turn to consultants, system integrators, and other professional services organizations.

The movement to SOAs present both opportunities and threats to consulting firms: on the one hand, there will be an increased demand for architectural consulting, business process consulting and the implementation tasks associated with building SOAs. On the other hand, as SOAs take hold and Service-oriented process solutions supplant integration solutions, the market for system integration will dry up, requiring system integrators to change their business focus.

This report analyzes the market for SO

Service-Oriented Architecture Consulting

Service-Oriented Architectures (SOAs) represent an evolutionary approach to distributed computing that promises a flexible IT environment that leads to business agility. As companies look to leverage the business advantages of Web Services to address strategic business needs, they are increasingly looking to build SOAs. However, SOAs require special skills and expertise. When companies do not have such skills in-house, they turn to consultants, system integrators, and other professional services organizations.

The movement to SOAs present both opportunities and threats to consulting firms: on the one hand, there will be an increased demand for architectural consulting, business process consulting and the implementation tasks associated with building SOAs. On the other hand, as SOAs take hold and Service-oriented process solutions supplant integration solutions, the market for system integration will dry up, requiring system integrators to change their business focus.

This report analyzes the market for SOA within professional services organizations from three perspectives: from the point of view of the consulting firm, who must understand how its business must change; from the perspective of the enterprise user, who must select and manage a consultant; and from the point of view of software vendors who wish to work with consultants to help them meet the needs of their customers.

Service-Oriented Architecture Consulting Partnership Landscape

Service-Oriented Architectures (SOAs) represent an evolutionary approach to distributed computing that promises a flexible IT environment that leads to business agility. As companies look to leverage the business advantages of Web Services to address strategic business needs, they are increasingly looking to build SOAs. However, SOAs require special skills and expertise. When companies do not have such skills in-house, they turn to consultants, system integrators, and other professional services organizations.

The movement to SOAs present both opportunities and threats to consulting firms: on the one hand, there will be an increased demand for architectural consulting, business process consulting and the implementation tasks associated with building SOAs. On the other hand, as SOAs take hold and Service-oriented process solutions supplant integration solutions, the market for system integration will dry up, requiring system integrators to change their business focus.

This report analyzes the market for SO