1. A method for propagating identity information in a composite application, the method comprising: processing, by a computer system, a first step of the composite application for an entity, wherein: the entity is a web service client; the entity is linked with a set of subject information; the set of subject information comprises an identity attribute linked with the entity and a security attribute linked with the entity; and the first step is processed if the security attribute is authenticated; transferring, by the computer system, state data of the composite application as executed for the entity to a non-transitory computer-readable storage medium, wherein: the state data comprises at least a portion of the set of subject information linked with the entity; and the security attribute is not present in at least the portion of the set of subject information in the state data transferred to the non-transitory computer-readable storage medium; storing, by the computer system, the state data of the composite application as executed for the entity using the non-transitory computer-readable storage medium; retrieving, by the computer system, the state data of the composite application as executed for the entity from the non-transitory computer-readable storage medium; following retrieving the state data of the composite application as executed for the entity, determining, by the computer system, the security attribute of the set of subject information linked with the entity; and populating, by the computer system, the security attribute of the set of subject information linked with the entity; wherein a restart is tolerated while the state data of the composite application as executed for the entity is stored by the non-transitory computer-readable storage medium.