Web service security - authorization

I am trying to look for state-of-the-art approaches to do authorization to secure web services and SOA's in general. I found the following two articles while searching: link1 and link2.

I find that XACML is one of the standard ways of achieving authorization.

I want to ask what are the other common ways of doing so ?

Also is the content in the two links still relevant ?