*1 Terminology is not standardized.
We distinguish between legacy systems that require an additional adaptive
component to participate in an orchestrated service and those backend systems
that have the service enabling functionality themself.
Assumptions:
Service authentication with SSL x 509 certificates, i.e. trust established via internal issuing CA
Transaction authentication with SAML tokens
Every transaction is authorized independently
The enterprise service bus (ESB) is implemented in a distributed manner, meaning it is included in each component that contributes to the service deliver.
Typical Challenges:
In addition to adherance to service level agreement for a single service, end-to-end QoS management is critical
for composite services. The dynamic nature of web services makes end-to-end QoS management a major
challenge
Performance of transaction authorization: cost of security per transaction is considerable, this will drive coarse grained services
Description: TBD
Resistance against threats: TBD. List of the threats that the pattern can resist.
