'[Dev] How to secure STS with Issued Token in WSO2 IS?'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       esb-java-dev
Subject:    [Dev] How to secure STS with Issued Token in WSO2 IS?
From:       Joni Lee <webcokies () yahoo ! com>
Date:       2018-10-19 9:19:32
Message-ID: 1661591552.41541.1539940772616 () mail ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Dear developers,
I want to secure an STS with an issued token over the transport layer (i.e., an STS \
Client sends a RequestSecurityToken to the STS with a SAML assertion in the security \
header for authentication). It found wso2-rampart has the following implementation \
for SAML assertion: https://github.com/wso2/wso2-rampart/blob/master/modules/rampart-trust/src/main/java/org/apache/rahas/RahasData.java#L200
 However, in WSO2 IS, I cannot find an appropriate security policy in the "Security \
Token Service Configuration". Do you have any advices for me?
Many thanks

[Attachment #5 (text/html)]

<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica \
Neue, Helvetica, Arial, sans-serif;font-size:10px;"><span><font size="2"><div>Dear \
developers,</div><div><br></div><div>I want to secure an STS with an issued token \
over the transport layer (i.e., an STS Client sends a RequestSecurityToken to the STS \
with a SAML assertion in the security header for \
authentication).</div><div><br></div><div>It found wso2-rampart has the following \
implementation for SAML \
assertion:</div><div><br></div><div>https://github.com/wso2/wso2-rampart/blob/master/m \
odules/rampart-trust/src/main/java/org/apache/rahas/RahasData.java#L200</div><div><br></div><div>However, \
in WSO2 IS, I cannot find an appropriate security policy in the "Security Token \
Service Configuration".</div><div><br></div><div>Do you have any advices for \
me?</div><div><br></div><div>Many \
thanks</div></font></span><br><br></div></body></html>

_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

[prev in list] [next in list] [prev in thread] [next in thread] 