Including BinarySecurityToken in the SOAP header
Gina Choi
gchoi at sdl.com
Mon Mar 26 23:47:10 BST 2012
Hi,
I am planning to add BinarySecurityToken in the SOAP header like
bellow(http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3-os.pdf
Line 1630-1669). Do I need to sign RequestSecurityToken or Sign Soap Body
with the certificate referenced in BinarySecurityToken? What is Base64 encode
value specified inside BinarySecurityToken(MIIEZzCCA9CgAwIBAgIQEmtJZc0...) is
about?
<S11:Envelope xmlns:S11="..." xmlns:wsse="..."
xmlns:wsu="..." xmlns:wst="...">
<S11:Header>
...
<wsse:Security>
<wsse:BinarySecurityToken wsu:Id="reqToken"
ValueType="...X509v3">
MIIEZzCCA9CgAwIBAgIQEmtJZc0...
</wsse:BinarySecurityToken>
<ds:Signature xmlns:ds="..."> ...
<ds:KeyInfo>
<wsse:SecurityTokenReference>
<wsse:Reference
URI="#reqToken"/>
</wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature>
</wsse:Security>
Thanks.
Gina
More information about the dev
mailing list