Using JAAS in Java EE and SOA Environments

As Service-Oriented Architecture (SOA) is now slowly starting to change its status from a buzzword associated with boxes on drawing boards, the early adopters are beginning to look beyond primitive examples of service orchestration. One of the first questions they are immediately faced with is providing a common security model for their heterogeneous services. Many enterprises with heavy investments into Java technologies have already developed sophisticated JAAS-based security stacks, both on Java SE and EE platforms. Therefore , the task at hand is to define ways for taking such JAAS-based security services to the next level, to help in linking SOA services. , the task at hand is to define ways for taking such JAAS-based security services to the next level, to help in linking SOA services.