For Application Development & Program Management Professionals (Length: 9 pages)

December 28, 2006

Web Services Specifications: Security

When To Use Which Secure Web Services Specifications

This is the fourth document in the "Status Of SOA And Web Services Specifications" series.

by Randy Heffner

with Gene Leganza, Jacqueline Stone


Executive Summary (This is a document excerpt)

Web services adoption continues, but it is taking a long time to work out all of the specifications and standards. According to data from recent Forrester surveys, among the specifications for secure Web services, both WS-Security and WS-I Basic Security Profile have strong support and interest from both users and vendors. The dominant security token types supported with WS-Security are SAML, X.509, and username tokens. Standalone use of XML Signature and XML Encryption also fares well, though less so among non-SOA infrastructure vendors. Other specifications, such as WS-SecureExchange, WS Federation, and XACML, have signs of emerging support from both users and vendors.

Buy Risk-Free

Download and print PDF immediately. Price: US $499

Our Money-Back Guarantee: If you are not completely satisfied, return it for a full refund within three weeks of your online purchase.

Already a Forrester Client?
Log in to read this document.

Add to cart

Find Documents In Related Categories

This document falls under the following categories. Click on a link below to find similar documents.

Analyst: Randy Heffner
Technology: Application Development, Application Infrastructure Technologies, Application Security, Architecture & Technology Strategy, Enterprise Architecture, Enterprise Architecture Domains, Security & Risk, SOA & Web Services
Geography: Asia Pacific, Europe, North America