I don't know of a book, but for a slice of this (sans SAML and XML
sig/encryption) feel free to download my powerpoint on Web Services Security
for Humans. THere is one that is just that and another that is that plus
WSE2.0. They are here:

www.thedatafarm.com/talks.aspx

Look for Web Services Security for Dummies with WSE2  near the bottom of the
page. You can dowload the powerpoint from there.

Also, both of these presentations are going to be published as articles
(already written, just sitting on a desk somewhere in Redmond <g>) on msdn
online web services developer center.
Again - this is only a slice of what you are lookingn for, but I have been
told by many that it really does demystify some of the security/crypto
basics that we need to know for WSE and Indigo.

hth

Julie Lerman