IBM WebSphere V5.0 Security - CGISecurity

SecurityTokenServiceRequesterWebServiceFigure 7-22 Security Token AcquisitionFigure 7-23 shows the main events in the scenario using Security TokenAcquisition.Figure 7-23 Scenario using Security Token AcquisitionFollowing is the series of events that occur in this scenario.1. The client constructs the SOAP message.2. The client computes a signature for the key elements of the message usingan XML Signature.3. The client's X.509 certificate is at a specific Web location. Consequently,rather than pass it in the message, the client provides a reference to its X.509certificate using the element in the header.4. The client sends the request to the service.5. The service extracts the reference to X.509 certificate from the header.Chapter 7. Securing Enterprise Integration components 153