« December 2009
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
  
       
Today

Blog::Navigation

Blog::Editing

Bookmarks::Blogroll

Blog::Referrers

Today's Page Hits: 132

Site notes

This page validates as XHTML 1.0, and will look much better in a browser that supports web standards, but it is accessible to any browser or Internet device. It was created using techniques detailed at glish.com/css/.

Powered by Roller Weblogger.
« New trust features... | Main | Metro 1.4 is release... »
Wednesday Oct 15, 2008

New Article: Using WS-Trust Support in Metro to Secure Web Services

I just published a new tech tip:
Using WS-Trust Support in Metro to Secure Web Services

It focuses on how to use different types of proof keys associated with issued tokens from an STS to secure Web services.

Comments:

The link is broken

Posted by Yaron Naveh on October 16, 2008 at 04:16 AM PDT #

Yaron: Fixed. Thank you!

Posted by Jiandong Guo on October 16, 2008 at 04:58 AM PDT #

Hi Jiandong Guo.
I have read the article of you. Very interesting.
I have to write a diploma thesis in which I have to call web services out of a java application. What I need is the user name that calls the web service. I spent about 2 weeks in studying Sun Java System Access Manager for this but now I think it is to big for my thesis. My question is now: Is it possible to realize it with the mechanism you described in your article? I mean the user should login when he starts the application with username and password. Then he can call different web services but on the server I should know his username (identity based web services).

I hope you can give me just an advise if I can do this with the STS of Metro so that I don't loose more time in studying the mechanism.

Thanks.

Posted by Stefan Meichtry on October 22, 2008 at 02:35 AM PDT #

Yes, you can. Login to the STS using username password. And then using the SAML asaertion carrying the username
to access the different services.

Posted by Jiandong Guo on October 22, 2008 at 02:37 PM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed
Locations of visitors to this page
Copyright (C) 2003, jiandongg