Installation Guides › Implementation Guide › Implementation Overview › SOA Security Manager Overview

SOA Security Manager Overview

SOA Security Manager is a policy-based access management system for Service Oriented Architecture (SOA) environments. With SOA Security Manager, you can protect XML transaction-processing web services that are implemented in the following ways:

• Implemented as a servlet or Active Server Page (ASP) and exposed by a web server or an application server.
• Implemented using the JAX-RPC binding and deployed on an IBM WebSphere Application Server or Oracle WebLogic Server
• Implemented using the JAX-RPC or JAX-WS binding and deployed on a JBoss Application Server.

SOA Security Manager protects XML resources in much the same way as CA SiteMinder protects HTML resources, allowing entitlement data to be obtained from any layer of the XML message, depending upon the authentication and authorization needs of the back-end applications.