An Identity and Access Management approach for SOA

Abstract

Various Identity and Access Management (IAM) architectural challenges are emerging for the effective deployment of applications in a Service-Oriented Architecture (SOA) context. SOA solutions should incorporate efficient access control techniques and adopt an optimal setup among countless and complex approaches in providing access control services. Web Single Sign-on (SSO), federated identities, password synchronization and service granularity can be accomplished through the IAM capabilities, so that SOA can address and fulfil most of the contemporary access management challenges. This paper proposes an innovative model to manage the multilevel integration of identity, authentication and authorization modules based on formal policy-based methods and various access control mechanisms in order to provide secure access to the resources. In the proposed model, we analyze and integrate identity, authentication, user roles, authorization access control levels, and rule validation mechanisms. Finally, the model offers policy-based and integration capabilities enabling automated controls, improved efficiency and simplified management.