Abstract: This paper proposes a mechanism for Web services secure communication to assure secure transport of SOAPmessage at application layer; SAML＇s syntax is extended to be implemented in XACML application, which solves the problem of access control. Finally, an

Key words: Web services, Access control, XACML, SAML