JBoss STS plan

[anil.saldhana]

Stefan/Alessio, please comment on the following.

Now that we are making progress with our STS implementation as per
http://www.jboss.org/community/wiki/JBossIdentityFederation, I wanted to pick your ideas about the following:

1. I have learned that Apache CXF at the moment does not have a STS implementation and as per http://cwiki.apache.org/CXF20DOC/ws-trust.html, they have a client that can talk to an STS.

JBossSTS is a pure JAXWS implementation. I think, Stefan as you said, next week, we need to look at examples of using CXF client calling in to the JBossSTS

2. The WS-T implementation will be bundled as part of the JBossIdentity build. Alessio, do you see any need to isolate the ws-t part and bundle it as part of JBossWS/CXF? I would prefer it to stay in JBID.

3. We need to test the STS with clients of other implementations (Metro, Rampart etc). There are some Microsoft Plugfest endpoints available also (but they may not help in testing the STS).

[asoldano]

1. I have learned that Apache CXF at the moment does not have a STS implementation and as per http://cwiki.apache.org/CXF20DOC/ws-trust.html, they have a client that can talk to an STS.

Exactly.

JBossSTS is a pure JAXWS implementation. I think, Stefan as you said, next week, we need to look at examples of using CXF client calling in to the JBossSTS

If that can help, remember there're samples in JBossWS-CXF for the client side.

2. The WS-T implementation will be bundled as part of the JBossIdentity build. Alessio, do you see any need to isolate the ws-t part and bundle it as part of JBossWS/CXF? I would prefer it to stay in JBID.

As long as you see that suits better JBID, no problem for me.

[anil.saldhana]

http://docs.oasis-open.org/ws-sx/security-policy/examples/ws-sp-usecases-examples-cd-01.html#_Toc232863531

Important for the STS implementation at JBoss.