Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. See Configuring a Service Provider for details on adding a service provider. 
  2. Expand the Inbound Authentication Configuration section and the WS-Trust Security Token Service Configuration section. Click Configure.
  3. In the resulting screen, enter the trusted relying party's endpoint address that is the endpoint address of the Security Token Service. For more information see Broker Trust Relationship with WSO2 IS and upload the public certificate of the trusted relying party.

     The

     

    Info
    • You need to add the certificate of the relying party to the truststore. For more information on how to create the certificate and add it to the truststore, see here.

    The endpoint must be used as the service URL to which the token gets delivered by the STS client. 

    Usually, the security token is signed by the STS. Thus, we need to select a certificate alias to sign the token. Select the default wso2carbon certificate alias. The tokens

    Then select the public certificate imported. Tokens issued are encrypted using the public

    key

    certificate of the trusted relying party.

    Even

     Therefore, the

    client

    consumer who obtains

    the

    this token, to

    send to

    invoke the RP

    has no visibility to the included

    service won't be able to see the token. 
    Image Modified

  4. Click Update to save the changes made to the service provider.

    Panel
    titleRelated Topics

    Run the STS client after configuring the service provider. See Running an STS Client to try out a sample STS client.

...