WL already has a SAML implementation for its JAX-RPC stuff, and it works well with its AquaLogic Service Bus (which you might end up using anyway if you're using SAML). There's an advantage to keeping all of this with one company (even though it was bought out by Oracle)--if you already have BEA support contracts you can go to them for headaches, etc.
Metro does have a SAML implementation, at least with GlassFish, but as I understand from a recent email CXF's requires much more manual coding if you wish to implement it. I have not yet learned SAML with CXF or Metro yet though so I can't comment intelligently on it--I would search our user mailing list on SAML for more info I guess. Glen 2008-07-03 John-M Baker wrote: > Thanks for this great feedback. May I ask, why do you recommend WL over > CXF when using SAML? > > John Baker > -- > Web SSO > IT Infrastructure > Deutsche Bank London > > URL: http://websso.cto.gt.intranet.db.com > > > > > Glen Mazza <[EMAIL PROTECTED]> > 03/07/2008 14:23 > Please respond to > [email protected] > > > To > [email protected] > cc > > Subject > Re: WL9.1 vs CXF > > > > > > > WL 10.0 at least does have a JAX-WS implementation, but none of the > security features are implemented for it--for that you still need their > JAX-RPC. > > I guess it depends on the security features that you need. If you plan > on using SAML tokens or WS-SecurityPolicy, I would recommend staying > with the WL web service stack. If not, then Metro or CXF are options for > you. > > On my blog, on the right-side "Last 15" menu, the Web Service links of > 27 Apr and 11 May may be of use for you, also here[1] for deploying > Metro or CXF on WebLogic, if you choose to go that route. > > [1] http://www.jroller.com/gmazza/entry/deploying_metro_and_cxf_based > > HTH, > Glen > > 2008-07-03 John-M Baker wrote: > > Hello, > > > > Does anyone have any thoughts on the pros & cons of using CXF over > WL9.1? > > > > To start, looking at the package names (MessageContext), WL uses JAX-RPC > > > rather than JAX-WS, yet both use JWS. > > > > Any feedback welcome. > > > > > > John Baker > > -- > > Web SSO > > IT Infrastructure > > Deutsche Bank London > > > > URL: http://websso.cto.gt.intranet.db.com > > > > > > --- > > > > This e-mail may contain confidential and/or privileged information. If > you are not the intended recipient (or have received this e-mail in error) > please notify the sender immediately and delete this e-mail. Any > unauthorized copying, disclosure or distribution of the material in this > e-mail is strictly forbidden. > > > > Please refer to http://www.db.com/en/content/eu_disclosures.htm for > additional EU corporate and regulatory disclosures. > > > > > --- > > This e-mail may contain confidential and/or privileged information. If you > are not the intended recipient (or have received this e-mail in error) please > notify the sender immediately and delete this e-mail. Any unauthorized > copying, disclosure or distribution of the material in this e-mail is > strictly forbidden. > > Please refer to http://www.db.com/en/content/eu_disclosures.htm for > additional EU corporate and regulatory disclosures.
