SoapActor and SCT

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Thomas S. Trias
    #1

    SoapActor and SCT

    Anyone know how I can set the SoapActor for the WSE SecurityContext Token
    issuer on my web service? I have the following setup:

    <tokenIssuer>
    <autoIssueSecur ityContextToken enabled="true" />
    <serverToken>
    <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
    <wsse:SecurityT okenReference
    xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
    <wsse:KeyIdenti fier
    ValueType="http ://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509Subject KeyIdentifier"> xY55p5yKXMVbn2e 0gmhB4kecdw8=</wsse:KeyIdentif ier>
    </wsse:SecurityTo kenReference>
    </KeyInfo>
    </serverToken>
    </tokenIssuer>

    Do I have to setup my own asmx method to handle the
    "http://schemas.xmlsoap .org/ws/2004/04/security/trust/RST/SCT" SOAP action?

    Thomas S. Trias
    Senior Developer
    Afni Insurance Services
    http://www.afniinc.com/


    Tags: None
    • Dilip Krishnan
      #2
      Re: SoapActor and SCT

      Hello Thomas,
      The way its implemented, if memory serves me right, you shouldnt have to
      do anything. You've already set it up with autoIssueSecuri tyContextToken
      enabled.

      HTH
      Regards,
      Dilip Krishnan
      MCAD, MCSD.net
      dkrishnan at geniant dot com
      geniant® — Next Generation Experiences
      http://www.geniant.com
      Experience is the advantage. AI is the multiplier.

      [color=blue]
      > Anyone know how I can set the SoapActor for the WSE
      > SecurityContext Token issuer on my web service? I have the following
      > setup:
      >
      > <tokenIssuer>
      > <autoIssueSecur ityContextToken enabled="true" />
      > <serverToken>
      > <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
      > <wsse:SecurityT okenReference
      > xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
      > security-secext-1.0.xsd">
      > <wsse:KeyIdenti fier
      > ValueType="http ://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
      > 9-token-profile-1.0#X509Subject KeyIdentifier"> xY55p5yKXMVbn2e 0gmhB4kec
      > dw8=</wsse:KeyIdentif ier>
      > </wsse:SecurityTo kenReference>
      > </KeyInfo>
      > </serverToken>
      > </tokenIssuer>
      > Do I have to setup my own asmx method to handle the
      > "http://schemas.xmlsoap .org/ws/2004/04/security/trust/RST/SCT" SOAP
      > action?
      >
      > Thomas S. Trias
      > Senior Developer
      > Afni Insurance Services
      > http://www.afniinc.com/[/color]



        Comment

        • Thomas S. Trias
          #3
          Re: SoapActor and SCT

          The issue works just fine; it's just that I want to set the SoapActor for SCT
          requests...

          If I set the SoapActor on my web service, I can access it with the
          appropriate "To" header (and read up the appropriate policy). I want to be
          able to use the same "To" and policy entries for the SCT issuer.

          Thomas S. Trias
          Senior Developer
          Afni Insurance Services
          http://www.afniinc.com/


          "Dilip Krishnan" wrote:
          [color=blue]
          > Hello Thomas,
          > The way its implemented, if memory serves me right, you shouldnt have to
          > do anything. You've already set it up with autoIssueSecuri tyContextToken
          > enabled.
          >
          > HTH
          > Regards,
          > Dilip Krishnan
          > MCAD, MCSD.net
          > dkrishnan at geniant dot com
          > http://www.geniant.com
          >[color=green]
          > > Anyone know how I can set the SoapActor for the WSE
          > > SecurityContext Token issuer on my web service? I have the following
          > > setup:
          > >
          > > <tokenIssuer>
          > > <autoIssueSecur ityContextToken enabled="true" />
          > > <serverToken>
          > > <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          > > <wsse:SecurityT okenReference
          > > xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
          > > security-secext-1.0.xsd">
          > > <wsse:KeyIdenti fier
          > > ValueType="http ://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
          > > 9-token-profile-1.0#X509Subject KeyIdentifier"> xY55p5yKXMVbn2e 0gmhB4kec
          > > dw8=</wsse:KeyIdentif ier>
          > > </wsse:SecurityTo kenReference>
          > > </KeyInfo>
          > > </serverToken>
          > > </tokenIssuer>
          > > Do I have to setup my own asmx method to handle the
          > > "http://schemas.xmlsoap .org/ws/2004/04/security/trust/RST/SCT" SOAP
          > > action?
          > >
          > > Thomas S. Trias
          > > Senior Developer
          > > Afni Insurance Services
          > > http://www.afniinc.com/[/color]
          >
          >
          >
          >[/color]

            Comment

            • Thomas S. Trias
              #4
              Re: SoapActor and SCT

              The issue works just fine; it's just that I want to set the SoapActor for SCT
              requests...

              If I set the SoapActor on my web service, I can access it with the
              appropriate "To" header (and read up the appropriate policy). I want to be
              able to use the same "To" and policy entries for the SCT issuer.

              Thomas S. Trias
              Senior Developer
              Afni Insurance Services
              http://www.afniinc.com/


              "Dilip Krishnan" wrote:
              [color=blue]
              > Hello Thomas,
              > The way its implemented, if memory serves me right, you shouldnt have to
              > do anything. You've already set it up with autoIssueSecuri tyContextToken
              > enabled.
              >
              > HTH
              > Regards,
              > Dilip Krishnan
              > MCAD, MCSD.net
              > dkrishnan at geniant dot com
              > http://www.geniant.com
              >[color=green]
              > > Anyone know how I can set the SoapActor for the WSE
              > > SecurityContext Token issuer on my web service? I have the following
              > > setup:
              > >
              > > <tokenIssuer>
              > > <autoIssueSecur ityContextToken enabled="true" />
              > > <serverToken>
              > > <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
              > > <wsse:SecurityT okenReference
              > > xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
              > > security-secext-1.0.xsd">
              > > <wsse:KeyIdenti fier
              > > ValueType="http ://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
              > > 9-token-profile-1.0#X509Subject KeyIdentifier"> xY55p5yKXMVbn2e 0gmhB4kec
              > > dw8=</wsse:KeyIdentif ier>
              > > </wsse:SecurityTo kenReference>
              > > </KeyInfo>
              > > </serverToken>
              > > </tokenIssuer>
              > > Do I have to setup my own asmx method to handle the
              > > "http://schemas.xmlsoap .org/ws/2004/04/security/trust/RST/SCT" SOAP
              > > action?
              > >
              > > Thomas S. Trias
              > > Senior Developer
              > > Afni Insurance Services
              > > http://www.afniinc.com/[/color]
              >
              >
              >
              >[/color]

                Comment

                • Thomas S. Trias
                  #5
                  Re: SoapActor and SCT

                  The issuer works just fine; it's just that I want to set the SoapActor for
                  SCT requests...

                  If I set the SoapActor on my web service, I can access it with the
                  appropriate "To" header (and read up the appropriate policy). I want to be
                  able to use the same "To" and policy entries for the SCT issuer.

                  Thomas S. Trias
                  Senior Developer
                  Afni Insurance Services
                  http://www.afniinc.com/


                  "Dilip Krishnan" wrote:
                  [color=blue]
                  > Hello Thomas,
                  > The way its implemented, if memory serves me right, you shouldnt have to
                  > do anything. You've already set it up with autoIssueSecuri tyContextToken
                  > enabled.
                  >
                  > HTH
                  > Regards,
                  > Dilip Krishnan
                  > MCAD, MCSD.net
                  > dkrishnan at geniant dot com
                  > http://www.geniant.com
                  >[color=green]
                  > > Anyone know how I can set the SoapActor for the WSE
                  > > SecurityContext Token issuer on my web service? I have the following
                  > > setup:
                  > >
                  > > <tokenIssuer>
                  > > <autoIssueSecur ityContextToken enabled="true" />
                  > > <serverToken>
                  > > <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
                  > > <wsse:SecurityT okenReference
                  > > xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
                  > > security-secext-1.0.xsd">
                  > > <wsse:KeyIdenti fier
                  > > ValueType="http ://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
                  > > 9-token-profile-1.0#X509Subject KeyIdentifier"> xY55p5yKXMVbn2e 0gmhB4kec
                  > > dw8=</wsse:KeyIdentif ier>
                  > > </wsse:SecurityTo kenReference>
                  > > </KeyInfo>
                  > > </serverToken>
                  > > </tokenIssuer>
                  > > Do I have to setup my own asmx method to handle the
                  > > "http://schemas.xmlsoap .org/ws/2004/04/security/trust/RST/SCT" SOAP
                  > > action?
                  > >
                  > > Thomas S. Trias
                  > > Senior Developer
                  > > Afni Insurance Services
                  > > http://www.afniinc.com/[/color]
                  >
                  >
                  >
                  >[/color]

                    Comment

                    Previous template Next
                    Working...