509 token pro?¬?le
Kerberos token pro?¬?le
Rights Expression Language token pro?¬?le
Being part of the WS-Security standard, those token types can be safely used in
scenarios requiring out-of-the-box interoperability; the pro?¬?les take care of describing
the expected behavior in ?¬?ne detail, such as using AssertionID or ID for
referencing SAML assertions crafted using different versions of the SAML standard.
Nothing prevents vendors and customers from creating their own token pro?¬?les,
to leverage existing investments in technologies not covered by the ?¬?ve pro?¬?les
in the speci?¬?cation. As long as every actor who needs to use the new kind of token
understands it, everything will work as expected.
WS-* Web Services Speci?¬?cations: The Rei?¬?cation of the Identity Metasystem 149
WS-Trust
The section ???The Babel??? in Chapter 1 subdivided the authentication
schemes into two big families: the ones based on certi?¬?-
cates and the ones based on issued tokens. WS-Security can
handle security tokens derived from both schemes, as long as
the requirements expressed by the relevant token pro?¬?le are
applied. Every authentication technology based on issued tokens
describes in its own way how a client can obtain a token.
Pages:
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257