Skip to Content »

online discount medstore
advair diskus for sale
buy advair diskus without prescription
allegra for sale
buy allegra without prescription
aristocort for sale
buy aristocort without prescription
astelin for sale
buy astelin without prescription
atarax for sale
buy atarax without prescription
benadryl for sale
buy benadryl without prescription
buy clarinex without prescription
clarinex for sale
buy claritin without prescription
claritin for sale
buy flonase without prescription
flonase for sale
buy ventolin without prescription
ventolin for sale
amoxil for sale
buy amoxil without prescription
augmentin for sale
buy augmentin without prescription
bactrim for sale
buy bactrim without prescription
biaxin for sale
buy biaxin without prescription
buy cipro without prescription
cipro for sale
buy cleocin without prescription
cleocin for sale
buy dexone without prescription
dexone for sale
buy flagyl without prescription
flagyl for sale
buy levaquin without prescription
levaquin for sale
buy omnicef without prescription
omnicef for sale
amaryl for sale
buy amaryl without prescription
buy cozaar without prescription
cozaar for sale
buy diabecon without prescription
diabecon for sale
buy glucophage without prescription
glucophage for sale
buy glucotrol without prescription
glucotrol for sale
buy glucovance without prescription
glucovance for sale
buy micronase without prescription
micronase for sale
buy prandin without prescription
prandin for sale
buy precose without prescription
precose for sale
buy cialis professional without prescription
cialis professional for sale
buy cialis soft without prescription
cialis soft for sale
buy cialis super active without prescription
cialis super active for sale
buy cialis without prescription
cialis for sale
buy levitra without prescription
levitra for sale
buy viagra professional without prescription
viagra professional for sale
buy viagra soft without prescription
viagra soft for sale
buy viagra super active without prescription
viagra super active for sale
buy viagra super force without prescription
viagra super force for sale
buy viagra without prescription
viagra for sale
buy celebrex without prescription
celebrex for sale
buy colcrys without prescription
colcrys for sale
buy feldene without prescription
feldene for sale
buy imitrex without prescription
imitrex for sale
buy inderal without prescription
inderal for sale
buy indocin without prescription
indocin for sale
buy naprosyn without prescription
naprosyn for sale
buy pletal without prescription
pletal for sale
buy robaxin without prescription
robaxin for sale
buy voltaren without prescription
voltaren for sale

Tech Life of Recht » Using ActAs with Metro

 Using ActAs with Metro

  • January 5th, 2010
  • 12:18 pm

Yesterday, I wrote about how to implement an STS with Metro. The reason for implementing an STS in the first place is that it enables identity delegation, something you probably want if you need to access a service on behalf of a specific user. The general flow is that the user authenticates, probably using SSO of some kind, and access a website. The site invokes a service on behalf of the user, and the service needs to be pretty sure that the user is actually sitting in the other end, even though there is no direct communication between the user and the service. The job of the STS is to be the one, everybody trusts, so that when the STS issues a token which says that the user is valid, then the service can trust that this is actually the case.

All of this can be done more or less automatically with Metro (at least when using a nightly build) by using this service policy:
[code]





urn:localsts

http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
http://docs.oasis-open.org/ws-sx/ws-trust/200512/PublicKey






















[/code]

Here, we express that the service requires an issued token of type SAML 2.0. Issued token means that the token has been created by an STS. In this case, we specify that the STS identified by urn:localsts must issue a token of type SAML 2.0. The exact location of the STS needs to be configured in the client.

Unfortunately, WS-SecurityPolicy does not make it possible to express the requirements for the WS-Trust Issue request. When using identity delegation, two sets of credentials should be passed to the STS: The client credentials, for example an X509Token or a UsernameToken, and the user credentials. The client credentials are provided using standard WS-Security mechanisms, and the user credentials are included in the Issue request using the ActAs element.

As shown in the STS example, the STS policy file takes care of the client credentials by specifying the appropriate tokens. The user credentials token cannot, however, be expressed in the policy, so it needs to be agreed upon out of band. This also means that you have to provide it manually to the client.

Luckily, it’s pretty easy to add an ActAs token to the client. Normally, the client is generated using wsimport. In this example, the service is called ProviderService:
[code]
DefaultSTSIssuedTokenConfiguration config = new DefaultSTSIssuedTokenConfiguration();
config.setSTSInfo(“http://docs.oasis-open.org/ws-sx/ws-trust/200512”,
“http://localhost:8080/sts/sts”,
“http://localhost:8080/sts/sts?wsdl”,
“SecurityTokenService”,
“ISecurityTokenService_Port”,
“http://tempuri.org/”);
config.getOtherOptions().put(STSIssuedTokenConfiguration.ACT_AS, createToken());

STSIssuedTokenFeature feature = new STSIssuedTokenFeature(config);
ProviderService service = new ProviderService();
Provider port = service.getProviderPort(feature);
EchoResponse result = port.echo(new Echo());
[/code]

Here, we create a new configuration object, set the endpoint information for the STS, and add an ActAs token. The contents of the ACT_AS attribute should be an instance of com.sun.xml.ws.security.Token, for example a com.sun.xml.wss.saml.Assertion. Normally, you don’t generate the token yourself. Instead, you get it as part of the initial authentication response – for example, if you’re using SAML 2.0 web SSO, one of the attributes received might be the ActAs token that should be passed to the STS when invoking services.

11,046 People had this to say...

Gravatar

Joyce Morley-Ball, a marriage and family therapist in Decatur, Georgia, and author of “Seeds for the Harvest of a Lifetime: Increasing Self-Awareness, Self-Esteem and Improving Relationships. I also found that streaming audio was becoming something that people wanted to use on websites without the need for special servers, a lot of technical ability etc. I know because I have been successful with several different companies.904)(1. Simple static electricity — or are romantic sparks responsible for that familiar tingle?We’ve been warned, over the last decade, to think twice before dating a coworker.
Wholesale Jerseys China

Gravatar

Tech Life of Recht » Blog Archive » Using ActAs with Metro
[url=http://www.g1kv2c25xh8176jn7ql2wd758q7y9xp8s.org/]uqlkcgwqmyz[/url]
qlkcgwqmyz http://www.g1kv2c25xh8176jn7ql2wd758q7y9xp8s.org/
aqlkcgwqmyz

Gravatar
Gravatar

They look not panic, the visitors’ dressing room after the game the normal reaction, chat with friends and laughing in the Treasury, said to the happy place is mild.

I have been exploring for a little bit for any high quality articles or blog posts on this kind of area . Exploring in Yahoo I at last stumbled upon this website. Studying this information So i am satisfied to convey that I have an incredibly excellent uncanny feeling I found out just what I needed. I such a lot no doubt will make sure to don?t fail to remember this site and provides it a glance regularly.|
billige nike free run sko nike free 3.0 womens

Gravatar
Gravatar

97321^&#&juiew8 I think the closest real world analogy that we have right now is the existence of cgi generated images of children under the age of consent engaged in sexual acts or depicted in a sexual manner. People are already creating these images to get around the employment of actual children, and some have argued that this is preferable and should be allowed to some degree because the possibility exists to lessen actual damage to real children. Does that damage the humanity of the one using it, or safely curb otherwise harmful (to actual people) tendencies. I don’t know, but it seems like an area for some research.97321^&#&juiew8
faux bracelet love cartier

Gravatar

97321^&#&juiew8 Que cor mais fooooofa! Tem um da Risqué que estou namorando, parecidinho com esse rs97321^&#&juiew8
bracelet cartier love femme

Gravatar

My basketball coach always told me that I needed to put all my effort to get into the right position and once I got there I could have a rest. Moreover, the average amount of yield spread premiums is quite substantial, on the order of $1,850 per transaction, making these payments the most important single source of revenue for mortgage brokers. Today it is growing in leaps and bounds.164 Discount = $200,000 x 1. The only way to improve your game is keep calm and focused.
Cheap NFL Jerseys

Gravatar
Gravatar

See what’s happening with Nike men’s running. Learn about the latest shoes,Air Max,Jordan,Air Force, and more, and connect with us online
Discount Jordan shoes

Want your say?

* Required fields. Your e-mail address will not be published on this site

You can use the following XHTML tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>