Welcome Pat G. Cappelaere

President / CEOVightel Corporation

Session Title:Workflows, Identity 2.0 & Delegated Authorization

April 21-23, 2008 Renaissance Washington, DC

The RESTFul Way 安らぎの道

SOA Journey: Two Paths

April 21-23, 2008 Renaissance Washington, DC

WOAFocused on Describing Operations

April 21-23, 2008 Renaissance Washington, DC

ROAFocused on Resources Of Value to A User

ROA

WOA

April 21-23, 2008 Renaissance Washington, DC

April 21-23, 2008 Renaissance Washington, DC

April 21-23, 2008 Renaissance Washington, DC

REST+

APP +…

I cannot drink zis!

http://host/R

CRUD

Business Case

Workflows, Identity 2.0 & Delegated Authorization

Who Is The Customer?

Science

DoD

Red Cross/First Responders

Web Services Access

What Does Our Customer Really Want?

Flood. . . . .

Flood

Science

DoD

Red Cross/First Responders

Security Problems

Manage Users

Authenticate/Authorize

Control Access

Delegate User Authority To Workflows

And Still Need Fairly Secure Transactions

WfCS Issues

Standardize API in a RESTFul Way

Discover Workflows

Many Workflow Engines!

April 21-23, 2008 Renaissance Washington, DC

Identity 2.0

Delegate User Identity to Trusted Identity Providers

Provides Single Sign-on Across Enterprise

Provides Profile Exchange Capabilities

Benefits:Simplify Password Management

Accept Users From Specific Communities of InterestDerive Access Privileges From Exchanged ProfileRESTFulMinimum Infrastructure Requirement

Dick Hardt, Founder & CEO, Sxip Identity

Web Services Secure Communications

Basic Authentication

SSL / PKI

OAuth 1.0 And User Pre-Approved Transactions

WebConsumer

WebProvider

WebConsumer

WebProvider

April 21-23, 2008 Renaissance Washington, DC

OAuth 1.0

Uses HTTP Authentication Header

http://oauth.net/

POST http://eo1.geobliki.com/sps HTTP/1.1Connection: closeAccept: */*Content-Type: application/x-www-form-urlencodedAuthorization: OAuth realm="/geobliki/sps", oauth_nonce="DknhjM5kkvhS1yT8dWgjTXzG3D8CpUQpd1c5zDx16cw", oauth_signature_method="HMAC-SHA1", oauth_token="http%3A%2F%2Fcappelaere.pip.verisignlabs.com%2F", oauth_timestamp="1206048828", oauth_consumer_key="test", oauth_signature="8N2tOq6KEj%2FSWCjDHs63ncYNVO8%3D", oauth_version="1.0"Content-Length: 1041Host: eo1.geobliki.com

April 21-23, 2008 Renaissance Washington, DC

Web Service Orchestration

Workflow EngineBPMN, XPDL…

But You Want To Keep it SimpleFor Your Service Provider PartnersFor Yourself

RESTFul Web Services Including Engine Itself

Workflow Reference Model

From SOAPy WfXML 2.0 to WfXML-R

QuickTime™ and a decompressor

are needed to see this picture.

Putting it Together

April 21-23, 2008 Renaissance Washington, DC

Applications

GEO/GEOSS, CEOS, IFRCSouth Africa Wild Fires Monitoring (fire)Mozambique Floods (flood)Southern California Fires (fire)Empire Challenge 08 (red dye, ships, fire)

Workflow Discovery

CS/W Is Now An Automated Feed Aggregator

April 21-23, 2008 Renaissance Washington, DC

Lessons Learned

Security is achievable using existing standards

Workflows Can Be Discovered Easily!

Everything is a Workflow!

April 21-23, 2008 Renaissance Washington, DC

Thank You!

Pat G. CappelaerePresident / CEOVightel Corporationhttp://www.vightel.com

Contact Information:443 283 0369pat@vightel.com