Chapter 3. Web Services integration 73
Consideration
By using Tivoli Access Manager for Application Server and WebSEAL, we can
protect Web server and Application Server, and in the view of security, we can
perform centralized management, even when the number of Web servers and
Application Servers increase.
Although this security architecture is not only URL but also J2EE role based, by
which means we can realize complex authentication and authorization scenarios,
if the end-users’ information or the requested resource information is only
available in a SOAP envelope, we cannot enforce authentication and
authorization using Tivoli Access Manager for Application Server.
Web Services with Tivoli Access Manager aznAPI
When we use Tivoli Access Manager ...