Stack Overflow
Stack Overflow

Questions tagged [ws-trust]

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security

WS-Trust is a WS-* specification and OASIS standard that provides extensions to WS-Security, specifically dealing with the issuing, renewing, and validating of security tokens, as well as with ways to establish, assess the presence of, and broker trust relationships between participants in a secure message exchange.

WS-Trust defines a number of new elements, concepts and artifacts in support of that goal, including:

  • the concept of a Security Token Service (STS) - a web service that issues security tokens as defined in the WS-Security specification.
  • the formats of the messages used to request security tokens and the
    responses to those messages.
  • mechanisms for key exchange

http://en.wikipedia.org/wiki/WS-Trust

94 questions
13
votes
2 answers

WS-Trust not authenticating with PHP

It's doing my head in.... What am i missing here... must be something with the timestamp, because when i play with those i get different errors... I've got the following envelope (which is how the provider gave it to me to use) But it keepis giving…
renevdkooi
  • 1,515
  • 1
  • 17
  • 42
7
votes
2 answers

Difference between WS-Trust, WS-Fed and SAML 1.1/ 2.0 protocols

What's the difference between WS-Trust, WS-Fed and SAML 1.1/ 2.0 protocols? My understanding on these protocols gets confused when SAML is used as a security token in WS-Trust and WS-Fed protocols. Interested in knowing in which scenario these…
Zeigeist
  • 3,755
  • 3
  • 20
  • 22
6
votes
1 answer

Authenticating to SharePoint Online using cURL (using ADFS 2.1 as IP-STS)

I'm trying to set up a simple script that uses cURL to monitor our SharePoint Online site by doing the following:- Log into our Office 365 environment using a federated identity (ADFS 2.1) using the "../adfs/services/trust/13/UsernameMixed"…
Duncan Hepple
  • 101
  • 1
  • 1
  • 4
4
votes
0 answers

Is there a way to port this WS-Trust code to .NET Core?

I have some legacy code (.NET framework) that I want to port to .NET Core 2.1. The intent is to retrieve a token from a WS-Trust compatible STS in order to make calls to WCF services. The code will effectively run in a new web services layer that…
Norman
  • 439
  • 3
  • 9
4
votes
1 answer

Object of type ElementNSImpl coming as com.sun.org.apache.xerces.internal.dom.ElementNSImpl

So my WS-Trust server deployed on JDK1.8.0_161 environment is expecting a request which will contain xml nodes of type org.apache.xerces.dom.ElementNSImpl, but when the request comes, the nodes are of type…
yogsma
  • 10,142
  • 31
  • 97
  • 154
4
votes
2 answers

What does WS-Federation really do (in depth and by a simple & understandable example)?

I have read some text about WS-Fedaration but i can not understand it. I have some questions : What would happen if there were no WS-Federation? How does it help to Single Sign-on? What is the difference between WS-Trust and WS-Federation? I just…
Amir Jalilifard
  • 2,027
  • 5
  • 26
  • 38
4
votes
3 answers

How to failover Azure ACS if a data center goes down

We are looking for a way to provide failover for ACS instances, so if one data-center goes offline, authentication via ACS automatically fails over into another data center. Background: We use ACS to transform SAML tokens that are provided by a…
Ryan Gross
  • 6,423
  • 2
  • 32
  • 44
3
votes
0 answers

How to create a WS-Trust client using JAX-RS usin Apache CXF library?

I searched through lots of documentation and googled a lot in order to find how to create a WS-Trust client using JAX-RS using Apache CXF library? Apache documentation clearly mentions that it support WS-Trust authentication but Partially. My…
Vinay Prajapati
  • 7,199
  • 9
  • 45
  • 86
3
votes
1 answer

ID3242: The security token could not be authenticated or authorized

At the moment i'm working on a project where my application has to validate with ADFS to login. I found some code to get the token from ADFS but it keeps giving me the error above without any good description about the error. This is the code I…
Noise
  • 41
  • 1
  • 3
3
votes
0 answers

Login to website authenticated with ADFS ,WS - Trust ,SAML token using curl PHP

I want to login to a website using PHP Curl for which I have username and password.After research I have found that the website is using WS-Trust and ADFS for authentication and authorizing.Here User's browser is redirected to IDP(ADFS) and…
Sanchita Rothe
  • 31
  • 4
3
votes
0 answers

Getting SAML token with claims from ADFS using WindowsIdentity

I have a scenario where the client uses kerberos authentication (this cannot be changed) and, thus my WCF web service only has access to the WindowsIdentity object (System.Security.Prinicpal.WindowsIdentity). The WindowsIdentity object doesn't tell…
user3335999
  • 392
  • 1
  • 2
  • 17
3
votes
1 answer

Configure CXF for STS/WS-Trust by code

I like to access a STS/WS-Trust protected SOAP service with CXF. As I am forced to reduce dependencies I use CXFBusFactory instead of spring configuration. This means I am forced to configure by code and this is quite less documentated and popular…
ZoolWay
  • 5,411
  • 6
  • 42
  • 76
3
votes
1 answer

How to get from ADFS a non-empty Recipient attribute in SAML Assertion

I'm trying to get a SAML Assertion from ADFS using WIF 4.5, and WS-Trust, so that I can send that Assertion to a Service Provider and obtain an OAuth ticket. In fact, I've been able to get the SAML Assertion, but it's not a valid one, because the…
Augusto Ruiz
  • 136
  • 6
3
votes
1 answer

Where can I find a U-Prove implementation for WS-Trust?

I'm looking for a WCF implementation of U-Prove that was formerly on the Microsoft connect website for test and experimentation purposes. I've seen several videos that mention U-Prove in conjunction with WCF/Cardspace, but it seems that all of those…
makerofthings7
  • 60,103
  • 53
  • 215
  • 448
2
votes
1 answer

How do I put a ClientAccessPolicy.xml file in the root directory of VS11's Local STS?

I am developing a Silverlight Application that uses active authentication to acquire a SAML token from an STS. During development, I'm trying to use Visual Studio's new Local STS, but to do so I need to put a ClientAccessPolicy.xml in the root…
Raymond Saltrelli
  • 4,071
  • 2
  • 33
  • 52
1
2 3 4 5 6 7