Abstract: According to one general aspect, a method may comprise identifying a provider application that is associated with a consumer application, from amongst a plurality of provider applications hosted on a provider machine. In various embodiments, the identification may be based at least in part upon the provider application's business identifier (ID). In various embodiments, each provider application includes at least one web service. In some embodiments, the plurality of provider applications includes a plurality of instantiations of at least one of the web service. In various embodiments, the method may also include transmitting a message to one of the web services of the identified provider application.

Abstract: According to one general aspect, a method may comprise identifying a provider application that is associated with a consumer application, from amongst a plurality of provider applications hosted on a provider machine. In various embodiments, the identification may be based at least in part upon the provider application's business identifier (ID). In various embodiments, each provider application includes at least one web service. In some embodiments, the plurality of provider applications includes a plurality of instantiations of at least one of the web service. In various embodiments, the method may also include transmitting a message to one of the web services of the identified provider application.

Abstract: A method is described that involves identifying a configuration file in response to a desire to obtain security services. The configuration file describes a security policy tailored for use in the environmental condition set under which the desire arose. The identifying is based upon at least a portion of the environmental condition set. The method also involves using information found within the configuration file to configure code that performs authentication and authorization services so that the code will implement the security policy.

Abstract: According to one aspect of the invention, a computing system capable of communicating with first and second user managers, the first user manager to perform authentication and authorization services for a first resource and the second user manager to perform authentication and authorization services for a second resource, is provided. The computing system comprises a container having an application, a first user store associated with the first user manager, and a second user store associated with the second user manager stored therein, the application to send a first user manager command to the first user store in a first format and a second user manager command to the second user store in the first format, the first user store to translate the first format into a second format and send the second format to the first user manager, the second user store to translate the second format into a third format and send the third format to the second user manager.

Abstract: Improved authentication service schemes are described. A first technique enables application specific authentication services even if container-wide authentication services are made available. A second technique prevents an authentication service from being performed if an attempt is made to reach an item of insensitivity within a protected area. A third technique introduces “get/set” functions into a login module callback handler arrangement for retrieving/imposing information from/to a communication session with a user that the login module is authenticating. A fourth technique distributes a login context function so that a network resides between separate portions of the login context function. A fifth technique uses a fallback handler in an application based authentication service so that a container-wide authentication service can be used.