Mr. Tay (Softwaremaker) has tackled the rather sticky problem of securely traversing mutliple SOAP intermediaries and come up with this article over on MSDN. There's a lot of good stuff to dig into here.
The scenario William came up with reminded me of a few customer projects we had going on at Avanade before I left. We were starting to see customers interested in factoring out things like authentication and authorization into separate services that operated pretty much how William described it. Customers are definitely starting to look at multi-hop message paths -- with that in mind, you can see why Indigo puts such a focus on the end-to-end picture when it comes to things like security and reliability.
It will be fun to watch these types of scenarios evolve in the future. An open question to William: what does this scenario look like on the Indigo CTP bits?
