Checklist

• Read the “Security in a Web Services World” road map document at

  http://www-106.ibm.com/developerworks/webservices/library/ws-secmap. The WS-Security specification is just the first of the specifications in this road map. However, the concepts, including tokens and claims, will carry through into later specifications, such as WS-Policy and WS-Trust.

• Ensure that any Web Services security product your company uses supports WS-Security. WS-Security is arguably the most important Web Services security specification, because it explains how XML security relates to SOAP, and will underpin many later specifications.