1.3.1.1 Web Service Web Applications

The following figure illustrates this protocol for Web applications that are Web services.

This protocol for Web service Web applications

Figure 1: This protocol for Web service Web applications

  1. The client requests the metadata for the Web service using WS Metadata Exchange protocol as described in [WS-MetaDataExchange].

  2. The Web service metadata is returned. The client discovers the Uniform Resource Locator (URL) of the Web Ticket Service. See details in section 3.2.

  3. The client requests the metadata for the Web Ticket Service.

  4. The Web Ticket Service metadata is returned. The following authentication types can be associated with the bindings in the metadata: Integrated Windows authentication, OCS-signed certificate authentication, and Live ID authentication. For details, see section 3.2.

  5. The client sends an RST (Request Security Token). For details, see section 3.2.4.1.1.1.

  6. The Web Ticket Service responds with an RSTR (Request Security Token Response). For details, see section 3.2.4.1.1.2.

  7. The client sends a request to the Web service, with the Web ticket attached. For details, see section 3.2.

  8. The Web service sends a response.