ApacheCon Vancouver : Training on Web Services Security

Today is the first day at ApacheCon 2011 @ Vancouver - Canada.

My training on Web Services Security started around 2.30 in the afternoon.

First part was a presentation on different security patterns and standards - then started digging in to the Rampart code.

All the samples I used are available here. You can use a simple SVN client to get that code. It comes as Eclipse projects and when loaded in to an Eclipse workspace, just set the SAMPLES_HOME environment variable in ECLIPSE to the root of the downloaded code - it should build fine then... Following are some of the resources that you can look in to.. 1. http://RampartFAQ.com 2. Understanding WS – Security Policy Language 3. Applying policies at binding hierarchy 4. Password Callback Handlers Explained 5. SAML Bearer Confirmation Method, Sender Vouches & Holder-of-Key 6. Identity Delegation in WS Trust 1.4 7. WS Security Policy – Asymmetric Binding Explained