Web Service Attributes Editor: Token Configuration
See Also
The Token Configuration section of the Web Service Attributes editor
is part of the security features provided by the
Web Services Interoperability Technology (WSIT).
A
binding represents common usage patterns for security mechanisms. They are
a part of the Security Policy for Web Services. These security
binding assertions are used to determine how the security is performed and
what to expect in the wsse:Security header.
The bindings available in this release of WSIT are identified by the style of protection
encryption used to protect the message exchange. These include the following
types of bindings:
- TransportBinding. The TransportBinding assertion is
used in scenarios in which message protection
and security correlation is provided by means other than WSS:
SOAP Message Security, for example by a secure transport like HTTP over
SSL (HTTPS). Specifically, this assertion indicates that the message is
protected using the means provided by the transport.
- SymmetricBinding. The SymmetricBinding assertion is used in scenarios in which message protection
is provided by means defined in WSS: SOAP Message Security. This
binding has two binding specific token properties: EncryptionToken and SignatureToken.
If the message pattern requires multiple messages, this binding
defines that the EncryptionToken used from initiator to recipient is also
used from recipient to initiator. Similarly, the SignatureToken used from initiator
to recipient is also use from recipient to initiator.
- AsymmetricBinding. The AsymmetricBinding assertion is used in scenarios in which message protection
is provided by means defined in WSS: SOAP Message Security. This
binding has two binding specific token properties: InitiatorToken and RecipientToken.
If the message pattern requires multiple messages, this binding
defines that the InitiatorToken is used for the message signature from initiator
to the recipient, and for encryption from recipient to initiator. The
RecipientToken is used for encryption from initiator to recipient, and for the
message signature from recipient to initiator.
Legal Notices