...
- See Configuring a Service Provider for details on adding a service provider.
- Expand the Inbound Authentication Configuration section and the WS-Trust Security Token Service Configuration section. Click Configure.
In the resulting screen, enter the trusted relying party's endpoint address that is the endpoint address of the Security Token Service. For more information see Broker Trust Relationship with WSO2 IS and upload the public certificate of the trusted relying party.
TheInfo - You need to add the certificate of the relying party to the truststore. For more information on how to create the certificate and add it to the truststore, see here.
The endpoint must be used as the service
Usually, the security token is signed by the STS. Thus, we need to select a certificate alias to sign the token. Select the defaultURL
to which the token gets delivered by the STS client.wso2carbon
certificate alias. The tokensThen select the public certificate imported. Tokens issued are encrypted using the public
keycertificate of the trusted relying party.
EvenTherefore, the
clientconsumer who obtains
thethis token, to
send toinvoke the RP
has no visibility to the includedservice won't be able to see the token.
Click Update to save the changes made to the service provider.
Panel title Related Topics Run the STS client after configuring the service provider. See Running an STS Client to try out a sample STS client.
...