Questions tagged [ws-trust]

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security, specifically dealing with the issuing, renewing, and validating of security tokens, as well as with ways to establish, assess the presence of, and broker trust relationships between participants in a secure message exchange.

WS-Trust defines a number of new elements, concepts and artifacts in support of that goal, including:

  • the concept of a Security Token Service (STS) - a web service that issues security tokens as defined in the WS-Security specification.
  • the formats of the messages used to request security tokens and the
    responses to those messages.
  • mechanisms for key exchange

http://en.wikipedia.org/wiki/WS-Trust

94 questions
0
votes
1 answer

How to change MVC 4 app from passive to active authentication

I have an MVC 4 app setup to redirect to a passive STS site. I don't fully understand all the voodoo that WIF is doing to populate the ClaimsPrincipal on the thread when it returns from the redirect. We now want to change it to an active STS. Based…
Roly
  • 1,516
  • 1
  • 15
  • 26
0
votes
1 answer

Debugging ADFS 2.0 errors

I am trying to get a SAML 2.0 token from an ADFS 2.0 ws-trust service using C#. The popular sample is this one http://leastprivilege.com/2012/11/16/wcf-and-identity-in-net-4-5-external-authentication-with-ws-trust/. However, this sample uses a…
Prof Von Lemongargle
  • 3,658
  • 31
  • 29
0
votes
1 answer

Has anyone ever got WS-Trust to work in JBoss 7?

I've literally tried everything under the sun to get token based WS-Trust Web Services to work, to no avail. I can obtain a token from an STS, but the life of me, I can not figure out how make the WS server secure and accessible from the outside…
Mike
  • 2,393
  • 3
  • 25
  • 37
-3
votes
1 answer

Implementing Service Provider, IdP and user in java with SAML (POC)

I'm trying to develope a project in java where I'll have 3 different applications running on 3 different servers profiles(IBM WebSphere sevrer). Application details... 1. Service app1 & Service App2.... When come one sends request to access…
1 2 3 4 5 6
7