System and method for bridging identities in a service oriented architecture

In a network, a method for providing authorised access, the method comprising the steps of:

• a. receiving from a user in said first security domain a request for service in a second security domain;
• b. authenticating the service requestor in the first security domain;
• c. forwarding said authenticated request to said second security domain for authorization;
• and
• d. providing access to the service upon confirmation of authorisation.

In a network environment a system for providing authorised access, comprising:

• a. an request listener in a first security domain for receiving a request for service in a second security domain from a user;
• b. an authenticator for authenticating the users credentials against a local authentication source and binding a security token to said request;
• and
• c. a decorator for decorating said request in accordance with a retrieved security policy from said second domain;
• and
• d. a gateway for receiving said decorated request and routing said request to said requested service upon verification of said request and said policy.