Federated identity management across multiple single-sign-on domains is a major challenge for SOA-based solutions to fully realize its business potential. The traditional username/password combination is often too weak to protect the extremely sensitive single-sign-on credentials. The new-generation mobile phones could be used to identify and authorize users for SOA services. The device-based authentication scheme depends on not only "what you know" but also "what you own." This session will discuss new advances in Java-based mobile devices to interoperate with Sun's Liberty Alliance Services.

• SOA and Web Services Go Mobile, Nokia-Style
• (Almost) a Dream J2ME Phone - the Nokia 6630
• "Mobility is More than J2ME," Says Michael Yuan