This documentation is for WSO2 Identity Server 4.1.0. View documentation for the latest release.
Managing Security Token Service - Identity Server 4.1.0 - WSO2 Documentation
Skip to end of metadata
Go to start of metadata

The "Security Token Service" component of WSO2 Carbon enables you to configure the generic STS to issue claim-based security tokens. This Security Token Service is capable of issuing SAML 1.1 and SAML 2.0 tokens as recommended in WS-Trust and SAML Web Service Token Profile specifications.

The WSDL of this service can be accessed by clicking this URL: https://(hostname):(port)/services/wso2carbon-sts?wsdl. For instance, with the default configuration, the URL is https://localhost:9443/services/wso2carbon-sts?wsdl.
Both SAML 1.1 and SAML 2.0 token types are supported by default. The issued token type is decided based on the Token type defined in the RST (Request Security Token).

Currently, the Bearer Subject Confirmation and Holder-Of-Key subject confirmation methods are both supported. With Holder-Of-Key, both Symmetric and Asymmetric key types are supported.

It is possible to obtain tokens containing claims which hold certain information about the subject. These claims can be extracted from the profiles or through custom claim callbacks which can be registered to the Carbon runtime.

Please see the following pages to learn more information about the Security Token Service:

  • No labels