Given that most applications are secured based on the network topology in which the Web service resides, WSE 3.0 introduces a scenario-based methodology to secure communication to and from a Web service. That is, instead of piecing security together for an application using multiple low-level security operations, WSE allows you to apply security at a higher level using a prepackaged set of security operations, which are known as security assertions. For common scenarios, WSE provides a set of these security assertions that are called turnkey security assertions.
Turnkey security assertions allow a developer to express one or more of the following:
-
Message-level security or transport-level security
-
The security credentials that are used to authenticate the client, the Web service, or both
-
The security credentials that are used to protect SOAP messages
The following table describes the turnkey security assertions that are shipped with WSE and the application scenarios where you would typically use them.
See Also