Including BinarySecurityToken in the SOAP header

Gina Choi gchoi at sdl.com
Mon Mar 26 23:47:10 BST 2012


Hi,

I am planning to add BinarySecurityToken in the SOAP header like
bellow(http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3-os.pdf
Line 1630-1669). Do I need to sign RequestSecurityToken or Sign Soap Body
with the certificate referenced in BinarySecurityToken? What is Base64 encode
value specified inside BinarySecurityToken(MIIEZzCCA9CgAwIBAgIQEmtJZc0...) is
about?

<S11:Envelope xmlns:S11="..." xmlns:wsse="..."
		xmlns:wsu="..." xmlns:wst="...">
	<S11:Header> 
		 ... 
		<wsse:Security>
			<wsse:BinarySecurityToken wsu:Id="reqToken"
ValueType="...X509v3">
				MIIEZzCCA9CgAwIBAgIQEmtJZc0...
			</wsse:BinarySecurityToken>
				<ds:Signature xmlns:ds="...">  ...  
					<ds:KeyInfo>
						<wsse:SecurityTokenReference>
							<wsse:Reference
URI="#reqToken"/>
	
</wsse:SecurityTokenReference>
					</ds:KeyInfo>
				</ds:Signature>
		</wsse:Security>

Thanks.

Gina


More information about the dev mailing list