Design of Infocard Integration for the Security Layer in JBo

[anil.saldhana]

I would like to dedicate this thread for the discussion of a potential architecture to integrate the Microsoft Identity Architecture around Infocard.

http://www.identityblog.com

There is a need to evaluate WS-Trust, WS-MetaData Exchange and WS-Secure Conversation to determine the integration points with JBossSX.

Federation SSO prototyping effort is just a prequel to this important topic.

Here is an article that talks about Trust Association Interceptor integration in Websphere.

http://www.theserverside.com/articles/article.tss?l=JAASAlternatives

Please review the design discussions around generalizing JAAS/Jacc, Identity and Federation/SSO - for more pointers.

[starksm64]

Infocard is really more of a usecase for generalizing the legacy JBossSX security services whose simple implementation diagram is shown here:
http://wiki.jboss.org/wiki/Wiki.jsp?page=JBossSXTheBigPicture

This needs to evolve into a design that allows a mapping of an architecture such as described in "A Guide to Integrating with InfoCard v1.0":
http://download.microsoft.com/download/6/c/3/6c3c2ba2-e5f0-4fe3-be7f-c5dcb86af6de/infocard-guide-beta2-published.pdf

[mholzner]

here is a blog entry with pointers to the InfoCard Guide and Technical Reference: http://blogs.msdn.com/andyhar/archive/2005/11/22/495649.aspx