Running an STS Client

The following sample demonstrates the steps required to run a Security Token Service (STS) client. The STS will provide the service of issuing a security token to authenticate a user for your client application, using WS-Trust protocols. 

Prerequisites

• WSO2 Identity Server 5.0.0 with Service Pack 1 installed - This can be downloaded from the WSO2 Identity Server product page and installed by following the instructions in the Installing the Product topic.
• The WS-Trust STS needs to be configured. You can do this by following the instructions found here.  
• Apache Tomcat 6 - To deploy the sample web application. This can be downloaded from here.
• STSSample - This can be found in the SVN repository.

Running the STS client

1. Create a folder in your local machine and navigate to it using your command line.

2. Download the Java sample by entering the following.The location of this folder will be referred to as <SAMPLE_HOME> from this point onwards.

   svn co http://svn.wso2.org/repos/wso2/carbon/platform/branches/turing/products/is/5.0.0/modules/samples/sts/

3. Build the client using the command mvn install.

4. Once the client is built successfully, run the sts-client.sh file in Unix or sts-client.bat in Windows. You can see that the SAML token issued from the STS is being printed by the client.

   The "connection refuse" error occurs in a situation where the STS client attempts to send the received SAML token to a service that is not running in this case.

Request and response messages to and from the STS