Developers, system integrators, and software engineers can use this book as a hands-on guide for implementing security standards using SAP NetWeaver 7.0. Each chapter starts with a description of the basic principles of different technologies - Web Services Security, Single Sign-on, SAML, SPML, etc. - and continues with detailed examples and hands-on exercises. In these exercises, you assume the role of an application developer responsible for communication and data security, as well as identity management, in a sample enterprise. Changing business requirements force you to adjust security measures at the application level. This requires you to know the relevant techniques to integrate different system components, and to implement open security standards in the context of service-oriented architectures.Numerous implementation tips, screenshots, and code examples provide detailed information about how you can efficiently use the different standards. And, the enclosed CD contains all programming examples used in the hands-on scenario.
Highlights
* Basic Security Principles: Risk Analysis, Cryptography, Certificates
* Authentication and Authorization: Security Functions, J2EE Security, UME, JAAS Framework
* Single Sign-on: Logon Tickets, SAML, Portal, Web Dynpro
* Identity Provisioning: Administration, SPML
* Web Services Security: AS ABAP/Java, Microsoft .NET, Windows Communication Foundation, Apache Axis
About the Author(s)
Martin Raepple is a Standards Architect at SAP AG. He represents the company on the work groups of several international standards bodies, where he is actively involved in the creation of new technology standards in the areas of security and identity management
Table of Contents
Preface ... 15
1 ... Introduction ... 17
2 ... Basic Principles of IT Security ... 23
... 2.1 ... Security and Service-Oriented Architectures ... 24
... 2.2 ... Developing Security Concepts ... 34
... 2.3 ... Basic Security Measures ... 39
... 2.4 ... Public Key Infrastructure ... 49
... 2.5 ... Summary ... 52
3 ... Authentication and Authorization in SAP NetWeaver Application Server Java ... 53
... 3.1 ... J2EE Application Security ... 54
... 3.2 ... J2EE Security in Practice ... 68
... 3.3 ... Application Security in J2EE Applications Using the SAP User Management Engine API ... 98
... 3.4 ... Java Authentication and Authorization Service ... 133
... 3.5 ... Summary ... 148
4 ... Single Sign-On ... 151
... 4.1 ... Basic Principles ... 152
... 4.3 ... Intercompany Single Sign-On ... 194
... 4.4 ... Summary ... 287
5 ... Identity Provisioning ... 289
... 5.1 ... Basic Principles ... 289
... 5.2 ... Service Provisioning Markup Language ... 292
... 5.3 ... SPML Support in SAP NetWeaver ... 302
... 5.4 ... Federated Identity Provisioning ... 312
... 5.5 ... Summary ... 333
6 ... Secure Web Services ... 335
... 6.1 ... Architecture ... 335
... 6.2 ... Basic Web Service Standards ... 337
... 6.3 ... Security Standards ... 346
... 6.4 ... Interoperability ... 362
... 6.5 ... Support for Secure Web Services in SAP NetWeaver ... 366
... 6.6 ... Testing and Error Analysis ... 408
... 6.7 ... Enterprise Scenario: Process Automation with Web Services ... 418
... 6.8 ... Exercise 6: Implementing the Subscenarios with WS-Security ... 426
... 6.9 ... Summary ... 491
Appendix ... 495
... A ... Setting Up the Certificate Authority and Key Management in the Enterprise Scenario ... 497
...... A.1 ... Installing the Certificate Authority ... 499
...... A.2 ... Creating the SecureSale SSL Key Pair for Apache Tomcat ... 504
...... A.3 ... Setting Up the SSL Server for SecureSale in SAP NetWeaver Application Server Java ... 507
...... A.4 ... Setting Up the SSL Server for SecureShipping in the SAP NetWeaver Application Server ABAP ... 515
...... A.5 ... Creating the CompSOA SSL Key Pair ... 521
...... A.6 ... Creating the SecureSale Web Service Key Pairs for Signatures and Encryption in the SAP NetWeaver Application Server Java ... 522
...... A.7 ... Creating the CompSOA Web Services Keystore ... 526
...... A.8 ... Creating the SecureShipping Web Service Key Pair for Signatures ... 529
...... A.9 ... Creating the TrustedBank Web Service Signature Key Pair ... 531
... B ... Referenced Literature ... 535
... C ... Author ... 539
Index ... 541.
