Paper to provide an overview of SAML and support in 7.0.0.7

I hope you found the SAML demo video from Greg useful. My team has put together a paper to provide an overview of the SAML technology introduced in WebSphere 7.0.0.7.

The paper is available for download here. This paper provides:

1. Introduction to SAML standards (a very rich set of standards and specification)
2. Comparison of SAML to LTPA and Kerberos technology and what problem SAML is solving
3. Different trust models based on Bearer, Holder-Of-Key, and Sender-Vouches Confirmation Methods
4. Self-Issuance of SAML token and external third party STS (Security Token Service) issuance
5. SAML token propagation in Web Services including different considerations for handling token timeouts
6. Client side SAML token caching
7. List of supported features for SAML introduced in WebSphere 7.0.0.7
8. Introduction to the default Policy Sets for enabling SAML Token Profile support
   

Here is the abstract of the paper:

Abstract
Security Assertion Markup Language (SAML) is an XML based framework developed by the Organization for the Advancement of Structured Information Standards (OASIS), used for the exchange of security information between different parties. This is an open standard that can be used to exchange security information between different products. SAML support in IBM® WebSphere® Application Server Version 7.0 Fix Pack 7 delivers a SAML solution that provides support for the most common scenarios SAML using Web services.

I hope you find the paper useful and please send us any feedback.