Hi,
How would I authenticate a SOAP message going to web service against SQL
Server / or Active Directory (using WSE 3.0)
Is this the correct way I am thinking:
a) i.e. Inherit a class from SecurityPolicyAssertion say MyCustomSecurity.
b) Create Custom filters class inherting from
SecureConversationServiceReceiveSecurityFilter and in this filters
ValidateMessageSecurity(....) method invoke code for authenticating againt
SQL Server / or Active Directory.
c) Call the filter in CreateServiceInputfilter override above
d) Declare the extension MyCustomSecurity in config file.
e) Also this would also require using SetCredential on the client proxy.
Correct?
The above would authenticate each message.
Also how to use a SecurityContextToken ? What are the step for doing that.
I did not find any sample code for using that.
Will appreciate your help on this.
Thanks,
Mo
Pablo Cibraro - 26 Jan 2006 14:06 GMT
Hi Mo,
You need a custom UsernameTokenManager. There are good examples about this
topic in the security guide for Web services (Microsoft Pattern &
Practices).
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/wssp.asp
Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax
http://www.lagash.com
> Hi,
>
[quoted text clipped - 22 lines]
> Thanks,
> Mo