Hi,
I'm unable to define the correct policy for SAML_TOKEN_SIGNED. The following
gets the STS token and includes it in the request, but now I need sign the
message.
<sp:InitiatorToken>
<wsp:Policy>
<sp:IssuedToken
sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
<sp:RequestSecurityTokenTemplate>
<t:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</t:TokenType>
<t:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/PublicKey</t:KeyType>
</sp:RequestSecurityTokenTemplate>
<wsp:Policy>
<sp:RequireInternalReference />
<wsp:Policy>
</sp:IssuedToken>
</wsp:Policy>
</sp:InitiatorToken>
I think I've to use InitiatorSignatureToken, but not sure how.
Thanks,
Vinay