Implementing Message Layer Security with a Security Token Service (STS) in WSE 3.0

Implementing Message Layer Security with a Security Token Service (STS) in WSE 3.0

Microsoft Corporation

patterns & practices Developer Center
Web Service Security: Home
December 2005

Note   This pattern is currently under development. It is due for release in early 2006.

Context

You are implementing brokered authentication in an application deployed on computers running Windows operating system software with security implemented at the message layer. Web services need to authenticate clients in a heterogeneous environment so that you can implement additional controls, such as authorization and auditing. The authentication broker negotiates trust between client applications and Web services, which removes the need for a direct relationship. The authentication broker should issue signed security tokens for authentication.

Implementation Strategy

A QuickStart that demonstrates how to develop a Web Service Enhancements (WSE) 3.0 Security Token Service (STS) that issues XML tokens is currently under development. This pattern will be updated when the QuickStart is released.

If you are interested in obtaining a Community Technical Preview (CTP) release or would like to contribute requirements, join the Security Token Service Quickstart community workspace [Content link no longer available, original URL:http://go.microsoft.com/fwlink/?LinkId=57069].