Security Service Token Sample Guide

In this sample we will demonstrate the usage of wso2wsas-sts service and its applications. The demonstration of this sample also uses the default echo service as the service provider.

HOW TO BUILD AND RUN THE SAMPLE

  1. Setup the sample by running the given Apache Ant build. $ ant
  2. Start WSO2 WSAS (If you haven't already started it)
  3. Log into WSO2 WSAS administration console.
  4. Select "wso2wsas-sts" service and setup security scenario #3 on it. Make sure wso2wsas.jks keystore (WSO2WSAS keystore) is used
  5. Select "echo" service and copy the http service address. Select "wso2wsas-sts" service and navigate to STS Configuration. Paste/type the http endpoint address of "echo" service in "Add new trusted service"->"Endpoint Address" Select the WSO2WSAS private key's certificate alias (wso2wsas)
  6. Select echo service and setup security scenario #12 on it. Makesure wso2wsas.jks keystore (WSO2WSAS keystore) is used.
  7. Upload sts-sample/conf/client.cert into the wso2wsas keystore using the WSO2WSAS admin console.
  8. Run client $ ./run-client.sh <wso2wsas-sts-http-address> <echo-service-http-address> OR run-client.bat <wso2wsas-sts-http-address> <echo-service-http-address>