leader replacement system - Department of Public Social Services ...

Los Angeles County
Department of Public Social Services
LEADER Replacement System (LRS)
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
• Transform message formats between requestor and service.
• Handle business events from disparate sources.
Some ESB vendors include additional features:
• Service composition
• Business process management
SOA Security
Because SOA is XML message-based, security in the SOA world is handled via specific
sections within an XML message. WS-Security from OASIS defines the mechanism for
including integrity, confidentiality, and single message authentication features within a SOAP
message. WS-Security makes use of the XML Signature and XML Encryption specifications and
defines how to include digital signatures, message digests, and encrypted data in a SOAP
message.
Identity and Authentication
Authentication means verifying the identity of a user. The Web service security standards allow
for the notion of identity authorities and trusted relationships. That is, an identity service can be
federated among departments; however there is only one authority for a given type of identity
(for example, a Citizen Authority which would be the single point of authenticating any citizen
performing an interaction requiring security). Other citizen-based applications would trust this
authentication and not re-authenticate as the user’s interactions invoke different applications.
SAML (Security Access Markup Language)
Security Assertion Markup Language (SAML) from OASIS provides a means for partner
applications to share user authentication and authorization information. This is essentially the
single sign-on (SSO) feature being offered by all major vendors in their e-commerce products.
In the absence of any standard protocol on sharing authentication information, vendors normally
use cookies in HTTP communication to implement SSO. With the advent of SAML, this same
data can be wrapped inside XML in a standard way, so that cookies are not needed and
interoperable SSO can be achieved.
SAML is an XML vocabulary that defines the syntax necessary to exchange identity information
between applications.
Security Standards
There are many Web service security standards. Please see the Security Standards for Web
Services section in the SOA Security White Paper for detailed descriptions.
Reference SOA Architecture
Establishing an Enterprise Reference Architecture is important for the big picture. SOA is a key
subset of the enterprise and it is sometimes not obvious where SOA fits into the enterprise.
That is, one can get lost in the many details and standards surrounding SOA. So, a Reference
SOA Architecture is provided (see following diagram).
LRS RFP - Attachment H (Technical Exhibits) Page 28 November 30, 2007