WCF Supporting Tokens

The Supporting Tokens sample demonstrates how to add additional tokens to a message that uses WS-Security.

The example adds an X.509 binary security token in addition to a username security token. The token is passed in a WS-Security message header from the client to the service and part of the message is signed with the private key associated with the X.509 security token to prove the possession of the X.509 certificate to the receiver.

This is useful in the case when there is a requirement to have multiple claims associated with a message to authenticate or authorize the sender. The service implements a contract that defines a request-reply communication pattern.

 The sample demonstrates:

• How a client can pass additional security tokens to a service.

• How the server can access claims associated with additional security tokens.

• How the server's X.509 certificate is used to protect the symmetric key used for message encryption and signature.

 code can be downloaded here: https://msdn2.microsoft.com/en-us/library/ms751480.aspx

Comments

• Anonymous
  April 16, 2008
  I've got a requirement to do just this (on the client-side at least) for an integration scenario with an external, non-WCF service, and have been looking for a sample.  This fits the bill perfectly!Thanks!