Patent ID: 8863225

Claim:
An enterprise service bus, comprising: a plurality of processors; a computer-readable storage medium, coupled to the plurality of processors; an identity mapping module; an authentication module; an authorization module; and logic, stored on the computer-readable storage medium and executed on the plurality of processors, for: retrieving, by the identity mapping module, an identity mapping policy for specifying direct and one-to-one correspondences between each identity of a first set of identities and each identity of a second set of identities, wherein the first set of identities correspond to a party and a client application, executed on a client computer, and the second set of identities correspond to the party and a server application, executed on a server computer; retrieving, by the authentication module, an authentication policy for authenticating a first identity of the first set of identities and a second identity of the second set identities, wherein the first identity and the second identity are mapped to each other by the identity mapping module; retrieving, by the authorization module, an authorization policy for authorizing the second identity for access to the server application and providing a service, corresponding to a service request, from the server application to the party based upon a mapping of the first identity to the second identity, an authentication of the first and second identities and an authorization of the second identity.