WS-Federation: Active Requestor Profile

Level: Advanced

Contributors: IBM, BEA Systems, Microsoft, VeriSign, RSA Security

08 Jul 2003

This specification defines how the cross trust realm identity, authentication and authorization federation mechanisms defined in WS-Federation are used by active requestors such as SOAP-enabled applications.

By using the XML, SOAP and WSDL extensibility models, the WS* specifications are designed to be composed with each other to provide a rich Web services environment. WS-Federation: Active Requestor by itself does not provide a complete security solution for Web services. WS-Federation: Active Requestor is a building block that is used in conjunction with other Web service and application-specific protocols to accommodate a wide variety of security models.

Get the specification

If you would like to contribute technical comments on this specification, please do so through our Feedback page.

Resources

• Web Services Federation Language defines mechanisms to allow different security realms to federate by allowing and brokering trust of identities, attributes, authentication between participating Web services.
  
  
• Federation in a Web services world describes the issues around federated identity management and a comprehensive solution based on the Web services model as outlined in the WS-Security roadmap.
  
  
• Web Services Federation Passive Requestor Profile defines a system for passive mechanisms to work seamlessly with a single or simplified sign-on to the WS-Federation system.
  
  
• Read "Security in a Web services World" for a proposed strategy for addressing security within a Web service environment (developerWorks, April 2002).
  

Back to top