WS-Policy

XACML is the widely used authorization mechanisms for web services. XACML provides fine grained authorization. In which one can define authorization based on very finer details. This finer information is stated in the policy as attributes. XACML also defines set of functions, which can be used in authorization logic evaluation. Due to detailed behavior, some believe XACML policies are esoteric and complicated. In this article I will elaborate XACML policies and will give you an idea as how XACML policy evaluation is taking place.

Although XACML can create certain bottlenecks, it cannot be taken completely out of the picture. It is still a good choice for access control and the use of the WSO2 Identity Server can help augment the benefits it provides.

XACML, shortened for extensible access control markup language, provides a flexible, fine-grained and scalable way of achieving policy-based access control. WSO2 carbon product platform provides a fine-grained access management solution with Policy Based Access Control (PBAC) based on XACML.

This article walks you through a sample scenario on how to build up a solution to control access to a RESTful service with XACML using WSO2 product stack.

Cloud computing has gained tremendous popularity among business owners and service providers in the enterprise software markets. Among the cloud’s numerous advantages and benefits are also considerable challenges, most of which are related to security, data privacy and trust. This article investigates some of the most common security concerns of the cloud today.

Hello all. I´ve followed all examples and tutorials about axis2 and rampart using wss, posted in wso2 (which are excellent), and they work fine in axis2 1.4.1 and rampart 1.4 on eclipse ganymede 3.4.1 and jdk 1.5.0_22 and tomcat-6.0.20. However, i've to implement a web service from a specific wsdl, using a keystore.jks and cacerts.jks that someone give to me, and here begin the problems as a "Error in signature with X509Token", and more. Could you help me if send you the wsdl ? Thanks. Emilio Here the wsdl: " <?xml version="1.0" encoding="UTF-8"?>

When Web services are used at the enterprise level, it's a common requirement to control the access remotely to these services. Isuru Suriarachchi, Senior Software Engineer at WSO2, explains how you can do that using WSO2 Throttle module. Isuru also explores the throttling configuration and the high level architecture of WSO2 Throttle module.

The WSO2 WSAS team is pleased to announce the release of the WSO2 WSAS 2.2. WSO2 WSAS is an enterprise ready Web services engine powered by Apache Axis2 release under the Apache Software License 2.0.

The WSO2 WSAS team is pleased to announce the release of the WSO2 WSAS 2.2. WSO2 WSAS is an enterprise ready Web services engine powered by Apache Axis2 release under the Apache Software License 2.0.

This release can be downloaded from http://wso2.org/projects/wsas/java

Maven2 binary distribution download
- Group Id : org.wso2.wsas
- Artifact Id : wso2wsas
- Version : 2.2
- Type : zip