OASIS Stamps Approval on Provisioning Standard

Previously, there was no one way to do this in a uniform manner. With SPML, companies don’t have to waste what could be millions of dollars on development work in order to get people provisioned or deprovisioned, said ZapThink Senior Analyst Ronald Schmelzer.

“What this means for companies is that as they purchase applications that require some sort of user access, they should make sure that they have a standard way of provisioning users on, and deprovisioning users from that application,” Schmelzer told internetnews.com.

“SPML will most likely work within a broader framework for enterprise-wide security infrastructure such as those provided by other standardization initiatives, such as WS-Security and WS-Policy,” he said. “WS-Security and WS-Policy are more concerned with specific user access to business logic, but there are clearly going to be cases when the two specifications will need to overlap. At the very least, any comprehensive security platform for Web Services will need to handle both of these sets of specifications — provisioning of physical and virtual assets and the access to these applications.”

Read more at: Internetnews.com

Web services ID management touted

“SPML adds to the identity management capabilities by providing a standard way in which access to these critical infrastructure resources can be granted or denied,” said analyst Ronald Schmelzer of ZapThink in Waltham, Mass. “This means that companies can build applications that have strict identity and security policies without having to do so in a proprietary and noninteroperable manner.”

“While SPML has more to do with provisioning physical access to specific resources, there is definitely potential for overlap or at least complementary offering to the WS-Security and WS-Policy specifications,” Schmelzer said.

Read more at: InfoWorld

OASIS Ratifies UDDI 2 as Open Standard

“The ratification of UDDI by OASIS is a big thing for the organization as it allows them to focus on the next and probably most significant version of UDDI,” said Ronald Schmelzer, an analyst with ZapThink LLC, a Cambridge-based market research company.

Read more at: eWeek

Overview of Web Services Security

Download File

Vers une harmonisation des politiques d’accès

Pour Ronald Schmelzer du cabinet Zapthink, spécialisé dans XML et les services web, « XACML fournit les moyens de définir et d’échanger les règles de sécurité de façon standardisée »

Read more at: 01Net.fr (French)

Specs Upgrade Safety of Web Services

These are initial versions of the specs, so customers still need to give their feedback,” said Jason Bloomberg, an analyst with ZapThink LLC, based in Cambridge, Mass.

Read more at: eWeek

Web Services Security Technologies & Markets

Download File

Web Services Security

Download File

What You Need to Know About Web Services Security

Download File

“OASIS fuels security agenda”

“OASIS has become a popularity party,” said Ron Schmelzer, senior analyst at Boston-based XML and Web services research company ZapThink. “It has less to do with 56 [companies] having something to really contribute than it has to do with 56 [companies] wanting to jump on the bandwagon.”

Read more at: InfoWorld