DataPower, a creator and provider of intelligent XML-aware Networking (XAN) infrastructure, has announced that DataPower and Computer Associates have extended their existing partnership for providing unified XML Web services security and management by further integrating DataPower's XS40 XML Security Gateway with CA eTrust access management solution. This joint DataPower-CA solution is intended to enable customers to set Web services access control policies in CA eTrust and manage Web services deployments using CA Unicenter while using the XS40 as a central policy enforcement point for the customer's Web services.
Instead of URL-based or connection-level access control, fine-grained authorization allows the XS40 to interrogate every individual SOAP/XML transaction and determine whether it should be allowed through based on payload contents, security policy, and identity information. For example, a purchase order that is: (i) over $500 (ii) digitally signed by the CFO's certificate (iii) targeted for vendor X (iv) sent before 5pm may be allowed through, while one immediately following it would be rejected. SAML, WS-Security and XACML are emerging standards for implementing this kind of access control in an open, cross-platform environment.