Questions tagged [ws-trust]

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security, specifically dealing with the issuing, renewing, and validating of security tokens, as well as with ways to establish, assess the presence of, and broker trust relationships between participants in a secure message exchange.

WS-Trust defines a number of new elements, concepts and artifacts in support of that goal, including:

  • the concept of a Security Token Service (STS) - a web service that issues security tokens as defined in the WS-Security specification.
  • the formats of the messages used to request security tokens and the
    responses to those messages.
  • mechanisms for key exchange

http://en.wikipedia.org/wiki/WS-Trust

94 questions
0
votes
1 answer

Add an ID Attribute for Element EncryptedAssertion or EncryptedData in RSTR from PingFederate

I'm using Apache CXF 3.1.5 to work with PingFederate 7.2. In PingFederate, I create a WS-Trust SP connection, if the SAML Assertion is not encrypted. it works well. If the SAML Assertion is encrypted, then it doesn't work, because CXF requires an…
Jason
  • 64
  • 8
0
votes
1 answer

WCF Active STS (WS-Trust) : Access is denied at System.ServiceModel.Dispatcher.AuthorizationBehavior.Authorize for JAVA clients

I am creating an Active STS that authenticates RST using issued tokens (SAML1, SAML2) and issues BinarySecurityTokens. This is working fine for .net clients. However, RST from Java clients (code, SOAP UI etc), we get following…
0
votes
1 answer

Does WS-Federation depend on Kerberos?

If WS-Federation/WS-Trust are deployed as part of a service to expose consumable ADFS endpoints, is there a dependency on Kerberos? For example, if Web Application Proxy (WAP) servers were being implemented as part of an ADFS roll-out and the WAP…
Motivated
  • 153
  • 1
  • 8
0
votes
1 answer

How to get specific RequestSecurityToken serialization

I'm new to WCF, .NET, web services and everything - in fact, I was mainly a java & SQL coder until I took on my current job. The task at hand: Portions of our customers' data in our database needs to be exported regularly to a database that is…
starkad
  • 1
  • 1
  • 3
0
votes
1 answer

how to configure adfs with saml 2.0 protocol to work with active client (non-browser based)

Is there a way to use adfs with saml 2.0 protocol to work with active client (non-browser based) service provider? Is there any equivalence to WSTrust (on WS-Federation protocol) for saml 2.0 protocol? If it is possible can you give me an example?
moran
  • 51
  • 2
  • 9
0
votes
1 answer

How to secure WCF web service using ADFS in .NET 4.5?

Using the Identity And Access tool ( part of VS 2012 ) i am able to configure a WCF to use our corporate ADFS server. Relevant web.config