Metro Security has a pluggable architecture and it makes use of JSR 196 (SOAP Profile) to achieve this pluggability. The use of JSR-196 provides a standard way to integrate Metro with the Authentication and Authorization Infrastructure of the underlying container. Though not all containers on which metro can run today support JSR 196, the idea is that as more and...
My previous post Security Token Configuration in Metro has exceeded the maximum limits (even after having used the extended entry) of a post and hence when i added some more details yesterday, i am seeing that the tail end of my post was truncated. So here is what was in the tail end...
Appendix
Here is the complete abstract schema for CallbackHandlerConfiguration and...
The earliest version of WS-SecurityPolicy implemented during early days of Metro/WSIT did not allow Binding Assertions to be attached to any scope other than the EndPoint scope. The latest versions of WS-SecurityPolicy specification allows Binding Assertions to be attached to operation scope.
We had a bug in our Metro code which prevented this from working correctly all these days. With...
