The "Security Token Service" component of WSO2 Carbon enables you to configure the generic STS to issue claim-based security tokens. A claim-based security token is a common way for applications to acquire and authenticate the identity information they need about users inside their organization, in other organizations, and on the Internet. This Security Token Service is capable of issuing SAML 1.1 and SAML 2.0 tokens as recommended in WS-Trust and SAML Web Service Token Profile specifications.
The WSDL of this service can be accessed by clicking this URL:
. For instance, with the default configuration, the URL is
Both SAML 1.1 and SAML 2.0 token types are supported by default. The issued token type is decided based on the type of token defined in the RST (Request Security Token).
Currently, the Bearer Subject Confirmation and Holder-Of-Key subject confirmation methods are both supported. With Holder-Of-Key, both Symmetric and Asymmetric key types are supported.
You can obtain tokens containing claims which hold certain information about the subject. These claims can be extracted from the profiles or through custom claim callbacks which can be registered to the Carbon runtime.
Please see the following pages to learn more information about the Security Token Service:
- Configuring STS for Obtaining Tokens with Holder-Of-Key Subject Confirmation
- Securing the Security Token Service
- Configure WSO2 Identity Server to Issue Security Tokens
- WSO2 Identity Server and Claim Aware Proxy Services with ESB
- Extending WSO2 Identity Server to Handle Custom SAML Assertions
- Accessing Claim Aware Services using STS Secured with Non-repudiation
- Broker Trust Relationships with WSO2 Identity Server