As Service-Oriented Architecture (SOA) is now slowly starting to change its status from a buzzword associated with boxes on drawing boards, the early adopters
are beginning to look beyond primitive examples of service orchestration. One of the first questions they are immediately faced with is providing a common
security model for their heterogeneous services. Many enterprises with heavy investments into Java technologies have already developed sophisticated
JAAS-based security stacks, both on Java SE and EE platforms. Therefore, the task at hand is to define ways for taking such JAAS-based security services to
the next level, to help in linking SOA services.
