Export (0) Print
Expand All

<TokenInfo> Element

Specifies the requirements for security tokens used to sign SOAP messages.

<policyDocument> Element
  <policies> Element
    <Policy> Element (WSE for Microsoft .NET) (1)
      <Integrity> Element

<TokenInfo>
  <SecurityToken>
  </SecurityToken>
</TokenInfo>

Attributes

None.

Child Elements

Element Description

<SecurityToken> Element

Required element. Specifies a supported security token.

Parent Elements

Element Description

<Integrity> Element

Specifies the digital signature requirements for a SOAP message.

The <TokenInfo> element also supports the <wsp:OneOrMore> element that allows a policy assertion state that a SOAP message can be signed by using one of a specified set of security tokens.

The following code example defines a policy assertion named signed-body-x509-or-Kerberos that requires the digital signing of the <Body> element, timestamp header, and all addressing headers by an X509SecurityToken or a KerberosToken and that SOAP messages sent the http://www.cohowinery.com/Service2.asmx endpoint adhere to the policy assertion.

Note:
This code example is designed to demonstrate WSE features and is not intended for production use.

<?xml version="1.0" encoding="utf-8"?>
<policyDocument xmlns="http://schemas.microsoft.com/wse/2003/06/Policy">
  <mappings>
    <endpoint uri="http://www.cohowinery.com/Service2.asmx">
      <defaultOperation>
        <request policy="#signed-body-x509-or-Kerberos" />
        <response policy="" />
        <fault policy="" />
      </defaultOperation>
    </endpoint>
  </mappings>
  <policies xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
            xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
            xmlns:wse="http://schemas.microsoft.com/wse/2003/06/Policy"
            xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing"
            xmlns:wssp="http://schemas.xmlsoap.org/ws/2002/12/secext"
            xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy"
            xmlns:wssc="http://schemas.xmlsoap.org/ws/2004/04/sc"
            xmlns:rp="http://schemas.xmlsoap.org/rp">
    <!--This policy requires that the body be digitally signed by either
        an X509 or a Kerberos security token.-->
    <wsp:Policy wsu:Id="signed-body-x509-or-Kerberos">
      <wssp:Integrity wsp:Usage="wsp:Required">
        <wssp:TokenInfo>
          <wsp:OneOrMore>
            <wssp:SecurityToken>
              <wssp:TokenType>http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3</wssp:TokenType>
            </wssp:SecurityToken>
            <wssp:SecurityToken>
              <wssp:TokenType>http://schemas.xmlsoap.org/ws/2003/12/kerberos/Kerberosv5ST</wssp:TokenType>
            </wssp:SecurityToken>
          </wsp:OneOrMore>
        </wssp:TokenInfo>
        <wssp:MessageParts xmlns:rp="http://schemas.xmlsoap.org/rp" Dialect="http://schemas.xmlsoap.org/2002/12/wsse#part">wsp:Body() wse:Timestamp() wse:Addressing()</wssp:MessageParts>
      </wssp:Integrity>
    </wsp:Policy>
  </policies>
</policyDocument>
Show:
© 2014 Microsoft