Page History

...

1. How do your services interact with your enterprise IAM frameworks?
   1. Authentication
   2. Authorization
   3. The management and distribution of user attributes
2. How do you manage trust in a distributed environment?
   1. Service-to-service authentication
   2. Service to service authorization (if applicable)
   3. The distribution of user attributes
   4. SSO

5. SOA design principles

1. Design approach. 
   1. Conceptual models
      1. Have you developed enterprise capability maps
      2. Have you developed an enterprise ontology
      3. Have you developed an enterprise conceptuial data architecture
   2. How do you design your contracts?
      1. Contract first
      2. Bottom up (java annotations)
2. Message styles (notes). Different message styles are appropriate for different contexts. Which ones do you use?
   1. SOAP
   2. REST
   3. Plain old XML (POX)
   4. Other
   Design approach.  How do you design your contracts?
   1. Contract first
   2. Bottom up (java annotations)
3. Documentation. How do you document your service contracts?
   1. Interfaces published in javadoc
   2. XML schema
   3. Textual descriptions on wikis
4. How do you mange trust between the various components
5. If some components are in the cloud, how will that affect your security architecture
6. Messaging: synch/asynch

...