Forum Discussion

pbluhm's avatar
pbluhm
17 years ago

Is it possible to create a signature for the BinarySecurityToken?

My server profile specifies that Timestamp, Body and Tokens should be signed.  When I add BinarySecurityToken with namespace http://docs.oasis-open.org/wss/2004/01/ ... xt-1.0.xsd to the 'parts' list ...
ajmolina's avatar
ajmolina
16 years ago
Try to change your security configuration:

1.- Timestamp
2.- Signature
      2.1.- Key Identifier Type -> BinarySecurityToken
      2.2.- Check Use single certificate for signing
      2.2.- Leave parts empty.
3.- Signature
      3.1.- Key Identifier Type -> None
      3.2.- Don't check Use single certificate for signing
      3.3.- Parts:
              3.3.1.- Timestamp.
              3.3.2.- Body.
              3.3.3.- BinarySecurityToken.

I test this configuration against web service deployed on OSB with Sign.xml policy and works fine.

Regards.