Although OPSS provides a comprehensive set of platform security services for application development and runtime abstraction, the end-to-end management of the security needs of enterprise applications spawn many aspects that are not addressed by OPSS. This is due to the fact that from a security and identity management perspective, an identity-enabled application itself does not necessarily address all of the identity management requirements, such as the following:
What is my corporate identity store?
Is there a single authoritative identity store where all my users reside?
Can the application recognize ...