Patent ID: 8572710

Claim:
A method to be executed at least in part in a computing device for message level authentication across multiple web services through a pluggable token provider model, the method comprising: receiving a web service request from a local web service component at a client application; locating metadata associated with the requested web service, wherein the metadata includes information associated with execution and authentication of the requested web service; parsing the metadata into a plurality of binding entries; when a credential is associated with the requested web service, retrieving the credential; based on the credential, selecting an appropriate binding entry from the plurality of binding entries, wherein the plurality of binding entries includes at least one from a set of: a resource identifier against which the web service request is to be made, operation and action information to be included in a web service message, an authentication type supported by the resource, security policy information corresponding to the resource, and a token provider identification based on a token issuer identifier in the security policy; retrieving a token associated with the retrieved credential; authenticating the requested web service based on the retrieved token and the selected binding entry; and when the authentication is successful, performing the requested web service.