SoapActor and SCT

[Thomas S. Trias]

Anyone know how I can set the SoapActor for the WSE SecurityContextToken
issuer on my web service? I have the following setup:

<tokenIssuer>
<autoIssueSecurityContextToken enabled="true" />
<serverToken>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier">xY55p5yKXMVbn2e0gmhB 4kecdw8=</wsse:KeyIdentifier>
</wsse:SecurityTokenReference>
</KeyInfo>
</serverToken>
</tokenIssuer>

Do I have to setup my own asmx method to handle the
"http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT" SOAP action?

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

[Dilip Krishnan]

Hello Thomas,
The way its implemented, if memory serves me right, you shouldnt have to
do anything. You've already set it up with autoIssueSecurityContextToken
enabled.

HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com

Anyone know how I can set the SoapActor for the WSE
SecurityContextToken issuer on my web service? I have the following
setup:

<tokenIssuer>
<autoIssueSecurityContextToken enabled="true" />
<serverToken>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
security-secext-1.0.xsd">
<wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
9-token-profile-1.0#X509SubjectKeyIdentifier">xY55p5yKXMVbn2e0gmhB 4kec
dw8=</wsse:KeyIdentifier>
</wsse:SecurityTokenReference>
</KeyInfo>
</serverToken>
</tokenIssuer>
Do I have to setup my own asmx method to handle the
"http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT" SOAP
action?

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

[Thomas S. Trias]

The issue works just fine; it's just that I want to set the SoapActor for SCT
requests...

If I set the SoapActor on my web service, I can access it with the
appropriate "To" header (and read up the appropriate policy). I want to be
able to use the same "To" and policy entries for the SCT issuer.

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

"Dilip Krishnan" wrote:

Hello Thomas,
The way its implemented, if memory serves me right, you shouldnt have to
do anything. You've already set it up with autoIssueSecurityContextToken
enabled.

HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com

Anyone know how I can set the SoapActor for the WSE
SecurityContextToken issuer on my web service? I have the following
setup:

<tokenIssuer>
<autoIssueSecurityContextToken enabled="true" />
<serverToken>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
security-secext-1.0.xsd">
<wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
9-token-profile-1.0#X509SubjectKeyIdentifier">xY55p5yKXMVbn2e0gmhB 4kec
dw8=</wsse:KeyIdentifier>
</wsse:SecurityTokenReference>
</KeyInfo>
</serverToken>
</tokenIssuer>
Do I have to setup my own asmx method to handle the
"http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT" SOAP
action?

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

[Thomas S. Trias]

The issue works just fine; it's just that I want to set the SoapActor for SCT
requests...

If I set the SoapActor on my web service, I can access it with the
appropriate "To" header (and read up the appropriate policy). I want to be
able to use the same "To" and policy entries for the SCT issuer.

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

"Dilip Krishnan" wrote:

Hello Thomas,
The way its implemented, if memory serves me right, you shouldnt have to
do anything. You've already set it up with autoIssueSecurityContextToken
enabled.

HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com

Anyone know how I can set the SoapActor for the WSE
SecurityContextToken issuer on my web service? I have the following
setup:

<tokenIssuer>
<autoIssueSecurityContextToken enabled="true" />
<serverToken>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
security-secext-1.0.xsd">
<wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
9-token-profile-1.0#X509SubjectKeyIdentifier">xY55p5yKXMVbn2e0gmhB 4kec
dw8=</wsse:KeyIdentifier>
</wsse:SecurityTokenReference>
</KeyInfo>
</serverToken>
</tokenIssuer>
Do I have to setup my own asmx method to handle the
"http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT" SOAP
action?

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

[Thomas S. Trias]

The issuer works just fine; it's just that I want to set the SoapActor for
SCT requests...

If I set the SoapActor on my web service, I can access it with the
appropriate "To" header (and read up the appropriate policy). I want to be
able to use the same "To" and policy entries for the SCT issuer.

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/

"Dilip Krishnan" wrote:

Hello Thomas,
The way its implemented, if memory serves me right, you shouldnt have to
do anything. You've already set it up with autoIssueSecurityContextToken
enabled.

HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com

Anyone know how I can set the SoapActor for the WSE
SecurityContextToken issuer on my web service? I have the following
setup:

<tokenIssuer>
<autoIssueSecurityContextToken enabled="true" />
<serverToken>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
security-secext-1.0.xsd">
<wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x50
9-token-profile-1.0#X509SubjectKeyIdentifier">xY55p5yKXMVbn2e0gmhB 4kec
dw8=</wsse:KeyIdentifier>
</wsse:SecurityTokenReference>
</KeyInfo>
</serverToken>
</tokenIssuer>
Do I have to setup my own asmx method to handle the
"http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT" SOAP
action?

Thomas S. Trias
Senior Developer
Afni Insurance Services
http://www.afniinc.com/