Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

They seem to be similar on the surface, but I'm not sure how deep the differences are.

Can someone explain to me the difference between SAMLp and WS-Trust? ADFSv2 gives me a choice between these options and I'm not sure which to choose.

share|improve this question

WSTrust is a standard which is specifies how to encrypt/decrypt/sign SOAP messages and how to bind security tokens to a SOAP message.

SAML tokens are an example of a security token that could be bound to a SOAP message.

The SAML protocol provides a standard way to acquire, release and renew SAML tokens using SSL to protect communications and the XmlDsig standard to protect the token.

share|improve this answer

AFAIK, They are similar WRT the end-goal.

  • WS-Trust is SOAP-based involving front-channel (browser) and back-channel (among services) communication, SAML-Passive can optionally use SOAP for backchannel communication,
  • SAML-P can involve no backchannel at all.
  • The XML documents involved have different name spaces: WST vs SAML
  • SAML-P is the name for the process of redirection and communication that achieves the federated login goal using SAML docs, but it seems that 'SAML' has come to be synonymous with 'SAML-Passive'
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.