I really need some help on this, folks. I'm having trouble wrapping my head
around an SCT. I'm attempting to create a simple example of using Username
Tokens and SCT's without an STS. I am verifying the username token through
the UsernameToken manager on the first call to the server, and want to send
back an SCT in the first response, to be used in all subsequent calls. Right
now, all i'm doing is instantiating a new SCT and passing in the verified
Username token into the constructor, then stuffing this SCT back into the
response. Is this it? I'm getting tripped up thinking that some keys need
to be generated.
Help!!
Lucien - 20 Aug 2004 20:55 GMT
Why are you not using the STS? It will work with the username token (see
sample). If really don't want to use that code you can (re)create your own
code (and make sure you have the same level of security supported by the SCT
client).
> I really need some help on this, folks. I'm having trouble wrapping my head
> around an SCT. I'm attempting to create a simple example of using Username
[quoted text clipped - 7 lines]
>
> Help!!
Jeffrey Hasan - 23 Aug 2004 18:28 GMT
Your description sounds fine for the initial work that must be done to
generate the SCT. So I actually don't see what your "trouble" is :) When you
say "stuffing" the SCT in the response, do you mean you're returning an
instantiated SCT? That's really all you need to do on the first return, but
then of course you need to start using the SCT for all subsequent requests
and responses.
Jeffrey Hasan, MCSD
President, Bluestone Partners, Inc.
-----------------------------------------------
Author of: Expert SOA in C# Using WSE 2.0 (APress, 2004)
http://www.bluestonepartners.com/soa.aspx
> I really need some help on this, folks. I'm having trouble wrapping my head
> around an SCT. I'm attempting to create a simple example of using Username
[quoted text clipped - 7 lines]
>
> Help!!