{"id":60,"date":"2012-07-14T12:13:00","date_gmt":"2012-07-14T12:13:00","guid":{"rendered":"http:\/\/anwi.gmbh\/?p=60"},"modified":"2023-09-17T14:14:46","modified_gmt":"2023-09-17T14:14:46","slug":"ws-security-unveiled-one-of-morecomplex","status":"publish","type":"post","link":"https:\/\/anwi.gmbh\/?p=60&lang=de","title":{"rendered":"WS-Security unveiled"},"content":{"rendered":"

 <\/b><\/p>\n

<\/a>One of the more
\ncomplex examples that ship with WLS is a WS-Trust based authentication of a web
\nservice using SAML assertions. This example is quite easy to setup and run and
\nthe example\u2019s documentation gives a basic understanding of what is going on.
\nBut we want to look deeper and shed light on the complexity that is hidden
\nbehind SSL, WS-Trust and SAML authentication. In a first step we separate the
\nscenario from the example server and integrate it into eclipse, to create an
\nisolated laboratory environment for further investigation. We will use
\nWireshark to analyze the actual flow of messages on the wire. We even look
\ninside the SSL streams to identify the WS-Trust tokens and SAML assertions as
\nthey are passed between the participants.<\/i><\/div>\n
 <\/div>\n
\n
\n
\n
\n

The WS-Trust specification, which is part of the WS-* stack of specifications for web services, was approved as OASIS standard in March 2007. Meanwhile it is generally accepted as an industry standard for implementing secure, trusted, and federated message exchange between service providers and consumers. So now is a good time to have a closer look at this technology. Despite the complexity of this topic, it is fairly easy to set up running examples of WS-Trust based java implementations using the examples that ship with Weblogic Server. We want to have a closer look at one of these examples: \u201cUsing SAML 1.1 Bearer Assertion for Authentication Case\u201d<\/p>\n<\/div>\n

Read the full article as PDF:<\/strong> WS-Security_unveiled.pdf (1,6 MB)<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n

Links to Files used in the Project:<\/strong><\/p>\n