Applying Security Assertion Markup Language (SAML) to non SOAP protocols

DCGS-A and other Programs of Record (PoRs) have identified RESTful services as a gap limiting their ability to meet net-centric requirements and actionable intelligence superiority. The proposed Phase II SBIR will develop and deliver a capability to secure RESTful services using Single Sign On (SSO) and Attribute-Based Access Control (ABAC) for cloud-enabled, Service Oriented Architecture (SOA)-based information systems. The proposed effort will support secure information sharing between DCGS enclaves, be interoperable with existing DCGS-A ABAC architecture and information technology (IT) applications, and enable a follow-on Phase III deployment. Phase II efforts will develop detailed use cases that model operational environments; provide a Concept of Operations (CONOPS); develop prototypes based on those models; provide test procedures, reports, and conformance test kits to support validation, benchmarking and risk analysis tasks; and provide a roadmap for deployment and implementation in Phase III. The prototypes will be used to support an Interoperability Demonstration Pilot and development of the Engineering/Deployment Roadmap to implement SSO and ABAC for federated RESTful services within DCGS-A and between DCGS-A and other DoD/IC entities.