Hi Can you specify that an interaction should be final or not? I looked at the messages exchanged in rampart sample 05, and there the RequestedSecurityTokenResponse was not wrapped inside a RequestedSecurityTokenResponseCollection
cheers, Håkon 2009/3/10 Massimiliano Masi <[email protected]> > Hi, > > Quoting Håkon Sagehaug <[email protected]>: > >> I 'm using the STSClient of rahas to call my sts service, but when I get >> the >> response back from the server I get this error message >> > > Because you are missing the RequestSecurityTokenResponseCollection. > > If it is a final step on issuing the token, the message MUST be: > > <RequestedSecurityTokenResponseCollection> > <RequestedSecurityTokenResponse> > <RequestedSecurityToken> > > According to the OASIS spec, section 3.2: > > The <wst:RequestSecurityTokenResponse> element (RSTR) is used to return a > security token or response to a security token request. The > <wst:RequestSecurityTokenResponseCollection> element (RSTRC) MUST be used to > return a security token or response to a security token request on the final > response. > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > -- Håkon Sagehaug, Scientific Programmer Parallab, Bergen Center for Computational Science (BCCS) UNIFOB AS (University of Bergen Research Company)
