RE: [ws-sx] AI-2006-04-04-03 : 2006-04-04

["Martin Gudgin" <mgudgin@microsoft.com>]

So as I understand your proposal, we'd add the text below to Section 10 (WS-Trust Options) and also add a single assertion, say, sp:RequireRequestSecurityToken that sets the property to 'true'?

 

<sp:Trust10>
 <wsp:Policy>

   ...

   <sp:RequireRequestSecurityTokenCollection />

    ...

 </wsp:Policy>

</sp:Trust10>

 

 

 

Gudge

---

From: Anthony Nadalin [mailto:drsecure@us.ibm.com]
Sent: 11 July 2006 21:32
To: ws-sx@lists.oasis-open.org
Subject: [ws-sx] AI-2006-04-04-03 : 2006-04-04

The only item that may make sense would be to have a property to allow usage of the RequestSecurityTokenCollection element

[Collection] Property

This boolean property specifies whether a RequestSecurityTokenCollection element is present. If the value is 'true', the RequestSecurityTokenCollection element MUST be present and MUST be integrity protected either by transport or message level security. If the value is 'false', the RequestSecurityTokenCollection element MUST NOT be present. The default value for this property is 'false'.

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122