The SecureSpan XML Firewall is a policy-driven identity and security enforcement point that can be implemented both in the enterprise and in the cloud to addresses a broad range of behind the firewall, SOA, Web 2.0, B2B and Cloud security challenges. With support for all leading directory, identity, access control, Single Sign-On (SSO) and Federation services, the XML Firewall can provide application services and security architects unparalleled flexibility in defining and enforcing identity-driven security policies leveraging SSO session cookies, Kerberos tickets, SAML assertions and Public Key Infrastructure (PKI). Support for all major WS* and WS-I security protocols provides architects with advanced policy controls for specifying message and element security rules, including the ability to branch policy based on any message context. The XML Firewall also ensures enterprise application and infrastructure services are protected again malicious attack or accidental damage due to poorly structured data.