Security Token Service (STS)

Description

The Security Token Service (STS) is a partial implementation of the OASIS WS-Trust specification. It is a SOAP service that provides a secure means for exchanging security tokens of one type (e.g. username/password, SAML assertion, X.509 certificate, ...) for security tokens of another type. Additionally the STS may renew, validate, or cancel those tokens for which such functionality is appropriate.

Project Information

Please go to the SWITCH forge STS project page: https://forge.switch.ch/redmine/projects/sts/wiki

References

• WS-Trust 1.3 Specification
• WS-Trust 1.3 Interoperability Profile (Draft)
• Internet2 Shibboleth 2.x
• Internet2 OpenSAML
• Microsoft Patterns & Practices Article Brokered Authentication: Security Token Service (STS)
• JBoss PicketLink Community Projects