Questions tagged [ws-trust]

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security, specifically dealing with the issuing, renewing, and validating of security tokens, as well as with ways to establish, assess the presence of, and broker trust relationships between participants in a secure message exchange.

WS-Trust defines a number of new elements, concepts and artifacts in support of that goal, including:

  • the concept of a Security Token Service (STS) - a web service that issues security tokens as defined in the WS-Security specification.
  • the formats of the messages used to request security tokens and the
    responses to those messages.
  • mechanisms for key exchange

http://en.wikipedia.org/wiki/WS-Trust

94 questions
1
vote
1 answer

WsTrust.Trust13Issue - setting RequestSecurityTokenType -ID3007: The element 'TokenType' with namespace '' is unrecognized

I am using WSTrust13 STS service to get the token. I created the client for WCF service using addreference mechanism in my console application. while making the request to WCF the reqest reached WCF service but it says that "ID3007: The element…
user3264937
  • 81
  • 14
1
vote
1 answer

picketlink-sts ws-trust mustunderstand header

Is there a way to configure picketLink-sts to accept soap requests with mustUnderstand headers? I'm using: https://github.com/picketlink2/picketlink-quickstarts/tree/master/ws-trust/picketlink-sts The request I send is:
Jeff
  • 979
  • 3
  • 10
  • 18
1
vote
1 answer

How can I sign a SOAP message (body and a header element) with a SAML assertion token?

The situation is like this: I have a security token from a STS under the form of a GenericXmlSecurityToken (I also have the SAML Assertion element for it). I need to use this security token to call a 3rd party service which needs some extra stuff…
Marcel N.
  • 13,726
  • 5
  • 47
  • 72
1
vote
1 answer

Perform SOAP calls with WS-Trust (ADFS)

I have a huge and old Java 5 application which now should call a webservice from MS-CRM. This is secured with an ADFS and SOAP calls can be done using WS-Trust. My first (unauthorized) tries with Apache HTTP Components 4.3 (httpcore/httpclient) just…
ZoolWay
  • 5,411
  • 6
  • 42
  • 76
1
vote
1 answer

CXF 3.0.0 raises org.apache.cxf.BusException: No DestinationFactory was found for the namespace http://schemas.xmlsoap.org/soap/http

Working with CXF-STS I came across exceptions as <<||2014-07-14 21:51:14,125||http-apr-8080-exec-8|DEBUG|org.apache.ws.security.processor.Signat‌​ureProcessor:428||||>> XML Signature verification has failed <<||2014-07-14…
Chakradhar K
  • 501
  • 13
  • 40
1
vote
0 answers

CXF STS client throws Request does not contain Security header/Response message does not contain WS-Addressing properties

working with CXF STS Service and STS client I am getting error as Jul 06, 2014 3:52:02 PM org.apache.cxf.ws.addressing.soap.MAPCodec restoreExchange WARNING: Response message does not contain WS-Addressing properties. Not correlating…
Chakradhar K
  • 501
  • 13
  • 40
1
vote
1 answer

No encryption crypto object found exception in Apache CXF

I am trying to build a Java client that communicates with .NET WCF services that use WS-Trust. My .net STS uses WS2007Http binding and UserNameToken-based authentication, hosted on http endpoint. var binding = new WS2007HttpBinding(); …
1
vote
0 answers

Windows Identity Foundation exception with WSO2 Identity Server 5.0

Windows Identity Foundation has trouble accepting SAML2 tokens requested from WSO2’s WS-Trust (see exception). Is it possible to change the token or is there a known solution to this problem? System.Xml.XmlException: Cannot read KeyIdentifierClause…
Sebastiaan
  • 41
  • 4
1
vote
3 answers

Claims and SAML2 confusion

My understanding is that claims are an STS thing based on WS-trust standard and nothing to do with SAML2 standard. WS-trust STS token can use SAML to send claims in that format. Am I correct?
1
vote
1 answer

SAP SAML authentication doesn't accept WS-TRUST URI token

We have a SSO setup between SAP NetWeaver and ADFS (acting as the STS). So, some user will login on a custom ASP.Net application and this application will request a SAML assertion from ADFS to access the SAP system. The thing is that according to…
Carlos Grappa
  • 2,351
  • 15
  • 18
1
vote
0 answers

WCF federated client with issued token doesn't send SAML assertion signature

I have an application that authenticates directly against a WIF/WCF active STS. The application is also a passive STS, acting as a WS-Federation endpoint for website relying parties. When a user logs into a website RP, they're redirected to the…
Adam Maras
  • 26,269
  • 6
  • 65
  • 91
1
vote
1 answer

Convert SAML token into JWT token using IdentityServer

I configured Thintecture Identity Server with identity federation (google, facebook, live id), and WCF SOAP service. Now I need WCF Rest Endpoint (webHttpBinding) for Windows Phone application. I don't want to pass WSTrust SAML token in…
zielu1
  • 1,308
  • 11
  • 17
1
vote
1 answer

Does Windows Identity Foundation (WIF) supports STS'es based on WS-Trust

Our partner is trying to setup a PicketLink STS which according to spec is based on WS-Trust. I can't find any information whether or not WIF is supporting this. I know it supports WS-Federation which is an extension on WS-Trust. Most of the time…
Martijn B
  • 4,065
  • 2
  • 29
  • 41
1
vote
1 answer

Can I auto generate an STS binding for WsFederationHttpBinding endpoints via MEX

I have a WCF service that exposes a WsFederationHttpBinding endpoint programatically. I want to then use Visual Studio to create a client side endpoint using the service reference dialog. The client generates the correct endpoint and binding but I…
Peter Short
  • 762
  • 6
  • 17
1
vote
1 answer

Securing WCF 4.5 service using Azure ACS 2.0

How can I secure my WCF 4.5 service using Azure ACS 2.0?
Mahmoud Samy
  • 2,822
  • 7
  • 34
  • 78