WS-Security is a flexible and feature-rich extension to SOAP to apply security to web services. It is a member of the WS-* family of web service specifications and was published by OASIS. Closely related to WS-Security is WS-Trust, also a WS-* specification and OASIS standard that provides extensions to WS-Security.
The following are WS-Security based products and services:
Product Name | Project/Vendor | Description | Standards/Protocols/Functionalities | |
---|---|---|---|---|
BAAR-IGA | BAAR Technologies | Identity and Access Management | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, OpenID Connect, OpenID, CAS, Single Sign On, Attribute based SSO | |
CA SiteMinder / CA IDM | CA Technologies | Identity and Access management | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, Security Token Service, Single Sign-on, RBAC, ABAC | |
EmpowerID[1] | The Dot Net Factory | Identity management | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, Security Token Service, Single Sign-on, RBAC, ABAC | |
Fusion Middleware[2] | Oracle | Identity management | WS-Security, WS-Federation, SAML, XML, RBAC | |
JBoss SSO[3] | JBoss | Identity management | WS-Security, WS-Trust, SAML, Single Sign-On | |
Hitachi ID Systems | Hitachi | Identity management | WS-Security, WS-Federation, Single Sign-On, SAML, XML | |
LemonLDAP::NG[4] | LemonLDAP::NG | SSO for Web Applications | WS-Federation, CAS, OpenID-Connect, SAML-2.0, Single Sign-on | |
Microsoft ADFS[5] | Microsoft | Federation Services | WS-Security, WS-Federation, Single Sign-on | |
Novell Access Manager[6] | Novell | Password manager & single sign-on | WS-Security, SAML, Single Sign-on, RBAC | |
OpenSAML[7] | Shibboleth | C++ & Java libraries | WS*-, WS-Security, WS-Addressing, WS-Trust, SAML, XACML | |
Open-source Apache CXF[8] | Apache | Open source framework | WS*-, WS-Security, WS-Addressing, WS-Trust, SOAP, XML, RESTful HTTP | |
Oracle Fusion Middleware[9] | Oracle | Identity management | WS-Security, WS-Federation SAML, XML, RBAC | |
Sailpoint IdM[10] | Sailpoint | Identity management | WS-Security, WS-Federation SAML, Single Sign-on, RBAC | |
SAP Security & IdM[11] | SAP | Security management | WS-Security, SAML, XML | |
SecureAuth IdP[12] | SecureAuth | Adaptive Access Control | WS-Security, WS-Trust, WS-Federation, SAML, OAuth, OpenID Connect, OpenID, CAS, Single Sign On | |
Sentry API Security Gateway[13] | Forum Systems | API Gateway | WS-Security, WS-Trust, WS-Federation, SAML | |
Tivoli Identity Manager[14] | IBM | Access Manager for E-business | WS-Security, WS-Federation, SAML, CAS, OpenID | |
Ubisecure[15] | Ubisecure Solutions | Single Sign-on Service | WS-Security, WS-Federation, TUPAS, OpenID | |
WS-Security Wrapper[16] | Source Forge | XML converter to/from SOAP with WS-Security | WS-Security, WS-Addressing, Java, XML | |
XML Firewall[17] | Layer7Tech | XML firewall for securing cloud-based systems | WS*, WS-Security, SAML, XML, OAuth | |