Jiri’s Notepad

This document sets out to describe technical components, people processes and management issues that are needed to design, build and maintain a secure web application. It includes requirements for architects and designers building common things like password reset systems, session management mechanisms and input filtering as well as architectural guidance. [OWASP]

VordelSecure
Quadrasis
Both products look pretty interesting and I hope to get to the whitepapers on the websites fairly soon.

Interim (pre WS-Security/SAML) implementation of web services authentication by Greg Reinacker
Usefulness of using WS-Security by Justin Rudd