Request Security Token Response Collection

[Massimiliano Masi <Massimiliano.Masi@tiani-spirit.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I am a bit confused on the WS-Trust 1.3 spec. In section 4.3,

The <wst:RequestSecurityTokenResponseCollection> element (RSTRC) MUST
be used to return a security token.

This means that an RSTR like:

<soap:Body>
  <wst:RequestSecurityTokenResponse>
    <wst:RequestedSecurityToken>
      <xyz:CustomToken>


is not valid? The schema correctly parses it.

Why you need to use a RSTRC even for 1 token? It's a big change
from ws-trust 1.0.

Ciao,

	Massimiliano

- --
Massimiliano Masi

Tiani "Spirit" GmbH
Guglgasse 6
Gasometer A
1110  Vienna
Austria/Europe






-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkl9hs8ACgkQaCwPO3A6yMaa9ACfSW7KHMWFI5bvgjyQMJSNTIt5
2Q0AnjAkP6KOJKoOfOL+91ibTCu5chr7
=/Ow6
-----END PGP SIGNATURE-----