Re: Can i change SecurityTokenReference KeyIdentifier from ThumbprintSHA1 change to X509SubjectKeyIdentifier

[Nandana Mihindukulasooriya]

Hi Sanpet,


  Can I config my policy to send KeyIdentifier
>
> ValueType="http://docs.oasis-open.org/wss/2004/xx/oasis-2004xx-wss-soap-
> message-security-1.0# X509SubjectKeyIdentifier"
>
>
Yes, it is possible. In you policy, Under the token assertion, add
"<sp:RequireKeyIdentifierReference />"

<wsp:Policy>
    <sp:X509Token sp:IncludeToken="
http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never";>
        <wsp:Policy>
                <sp:RequireKeyIdentifierReference />
                <sp:WssX509V3Token10/>
        </wsp:Policy>
     </sp:X509Token>
 </wsp:Policy>

and remove if there is a "<sp:RequireThumbprintReference/>" property.

Regards,
Nandana