Re: [xspa-interop-tech] WS-Trust Issuer and AppliesTo fields

From
Jiandong Guo
Date
2010-02-16T02:55:00+00:00
ID
Thread
Re: [xspa-interop-tech] WS-Trust Issuer and AppliesTo fields
Hi Craig,

Normally we depend on AppliesTo to determine on the STS side.

What are you expecting in the Issuer element? URI identifying the STS?
Is it mandatory for you to have it in the RST?

Also for the other parameters, is it fine we have the following values:

1. TokenType: urn:oasis:names:tc:SAML:2.0:assertion
2. KeyType: http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey
3. KeySize:  128

Thanks!

Jiandong

Jiandong Guo wrote:
> AppliesTo will point to the url of the server side STS. We should have
> it once Duane
> deploy that STS.
>
> No Issuer element is defined specifically in RequestSecurityToken in
> the spec:
> http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3-os.html#_Toc162064952
>
>
>
>
> Thanks!
>
> Jiandong
>
>
> Craig Forster wrote:
>> Hi all,
>>
>> IBM's WS-Trust implementation uses the Issuer and AppliesTo fields in
>> the
>> RequestSecurityToken to find the appropriate trust chain to invoke.
>> Do we
>> know what value these fields will have in our interop environment?
>>
>> Regards,
>> Craig
>>
>> ---
>> craig forster | staff software engineer | ibm australia development labs
>> http://blogs.tap.ibm.com/weblogs/craigforster/
>>
>>
>>

---------------------------------------------------------------------

>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>>

>
>
>

---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php