Global Trust / Securing the Enterprise

Securing the enterprise
White Paper
Version 1.12
August 2002REFERENCES Description
Apache Core Features Apache module API Java(TM) Authentication and Authorization Service JAAS specificationIntroduction to Apache SOAP Introduction to SOAPApache SOAP Documentation Apache SOAP DocumentationOASIS - Technical Committees - Security Services TC - SSTC Security Assertion Markup Language specificationsJ2SE 1.4 API All classesEnterprise JavaBeans(TM) Specifications EJB specificationDeveloping Security Providers for WebLogic Server Describes the implementation of SSPI for BEA WebLogic 7.0 and JAAS.Programming with the WebLogic Security SPI Describes the implementation of a "Custom Security Realm" with BEA WebLogic 6.1Securing applications -- special topics: WebSphere Application Server IBM WebSphere Application Server security Oracle Security Documentation Oracle Security DocumentationOracle9iAS Containers for J2EE User's Guide -- Contents Oracle Security Framework (JAZN)Oracle9iAS Containers for J2EE Services Guide -- Contents JAAS integration to Oracle OC4J J2EE ContainerOASIS - Technical Committees - DSML Committee Directory Services Markup Language specification
Written and published by OKIOK DATA Ltd.
© 2002 OKIOK DATA Ltd. All rights reserved. Summary
1. Introduction 7
2. Global Trust Physical Architecture 9
3. Global Trust Architecture 11
4. Global Trust Core Services 17
5. Integrated Security Services 25
6. LDAP Directory Design 33
7. External Realm Support 35Table of Content
4.7.1 Accountability Log ......................... 231. 4.8 High Availability ............................ 23Introduction 4.87 Scalability ......................................... 24
2. 5.
Global Trust Physical Integrated Security
Architecture 9 Services 255.1 Web Services.................................................. 265.2 Security Assertion Markup 3. Language (SAML)......................................... 26Global Trust Logical 5.3 Authentication Authority ............................ 265.4Architecture Single Sign-on and Web Services................ 2711 5.5 Attribute Authority....................................... 283.1 Identity Management ................................. 12 5.6 Authorization Authority.............................. 283.1.1 Delegate Administration ................ 12 5.7 Non-repudiation and Notarization 3.1.2 Scoping ............................................. 13 Service............................................................. 293.1.3 Password Management .................. 14 5.8 XML and Fine-Grained Document 3.1.4 Delegate Role Administration ....... 14 Access Control............................................... 293.1.5 Security Design ................................ 15 5.9 Hurricane II card support of XML Security............................................. 295.10 Common Secure Inter-Operability 4. Version-2 ........................................................ 30Global Trust Core 5.10.1 CSI level 0........................................... 305.10.2Services CSI level 1........................................... 3017 5.10.34.1 User Manager ............................................... 17 CSI level 2........................................... 305.114.2 Policy Manager ............................................ 18 The Authorization Token Layer Acquisition Service ....................................... 314.3 Authentication Service ............................... 184.3.1 Credential Evaluation and Mapping .......................................... 19 6.4.3.2 Universal User Identifier ................ 19 LDAP Directory Design 334.3.3 Anonymous and non-anonymousAccess.................................................. 204.3.4 Single Sign-on .................................. 21 7.External Realm Support 354.4 Authorization Service ................................. 214.5 Global Trust APIs and Agents ................... 214.6 Security Cache ............................................. 224.7 Audit Trail Service ...................................... 22
51.
Introduction
Global Trust is a comprehensive Permission Management Infrastructure that centrally controls and manages user access Permissions to Web-based resources, servlets, Beans or any external application. These permissions are based on configurable user attributes and security policies tha... [download for more]