luxoft software development

1. For more information about Luxoft, visit
www.luxoft.com
www.luxoft.com/technology/
case study
Extending Identity Management
to Web Services
14.09.2012
uu INDustry: Computer Software
uu Functional area: Identity Management
uu Business criticality: High
uu Domain skills: Java, .NET, SOAs, WS-Security, SAML 1.1 and SAML 2.0,
Kerberos
uu User profile: Enterprise
uu System geography: Worldwide
uu Number of users: N.A.
uu Relationships status: Ongoing; new release
uu Team size: Development team – 10
Client
A leading provider of federated identity and Web single sign-on software

2. Challenge
Solution
A leader in Internet Identity Management technologies needed to develop a
standalone application that implements a Security Token Service to extend Identity
Management to web services.
To facilitate development and accelerate time-to-market the client sought a
partner who could seamlessly integrate with its core development team and
support standard processes based on the agile approach. The client was looking
for a partner who would co-development the solution from step one.
Luxoft was chosen for its ability to provide a highly qualified team ready to work as
an extension of the client’s product development and testing teams.
Collaborating closely with the client, the Luxoft team helped architect, design and
develop the standalone Security Token Server - PingTrust. The solution creates and
validates security tokens that are bound into SOAP messages compatible with the
Web Services Security (WSS) standard. The result brings standards-based, trusted,
user identity to Web Services and Service-Oriented Architectures (SOAs).
PingTrust builds on two open security standards that set the stage for true
interoperability and a solution that scales. OASIS Web Services Security 1.0
(formerly WS-Security) enables the embedding of security tokens in SOAP
messages, while WS-Trust establishes a mechanism for obtaining and validating
tokens from a Security Token Service (STS). PingTrust supports both .NET and Java
applications, and Web-based and rich clients. PingTrust can operate on the Web
Services Client-side, Provider-side, or on both sides of a Web Service transaction.
PingTrust is a lightweight, standalone, modular product that:
uu Provides out-of-the-box support for several token types including SAML 1.1
and SAML 2.0, x.509, Kerberos and username/password, and is extensible to
support custom tokens
uu Provides a Web-based console for 100% GUI configuration
uu Moves identity-related security and cryptography code out of applications by
consolidating token security token processing into a centralized, shared server
uu Aggregates trust management to dramatically simplify administration
uu Does not require a heavyweight identity management system
02Luxoft - Case Study

3. Benefits
uu By supporting WS-Trust, PingTrust provides a Security Token Service that can
participate in the Identity Metasystem.
uu PingTrust enables identity information to be exchanged using industry
standard Web services regardless of the underlying platforms.
03Luxoft - Case Study
SAML 1.1
SAML 2.0
KERBEROS
X.509
USERNAME
/PASSWORD
CUSTOM
PING
TRUST
TOKEN
INPUTS
Trusted
Claims
TOKEN
OUTPUTS
SAML 1.1
SAML 2.0
CUSTOM
RESULT

4. About luxoft
Luxoft, a principal subsidiary of IBS Group, is a provider of advanced
application and software engineering outsourcing services for global and
regional enterprises. Luxoft builds partnerships with its clients, such as
Boeing, IBM, Deutsche Bank, UBS, Harman, Avaya, Alstom, and Sabre, based
on the culture of engineering excellence, innovation, and deep domain
expertise. Luxoft offers international delivery capability through its network
of state-of-the-art delivery centers in North America, Eastern Europe, and
Asia. Luxoft`s customers benefit from the right mix of technology skills,
industry knowledge, proprietary processes and methodologies, and a
choice of engagement models.
For more information about Luxoft, visit
www.luxoft.com
www.luxoft.com/technology/
© 2012 Luxoft