Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 3 down vote favorite
1

They seem to be similar on the surface, but I'm not sure how deep the differences are.

Can someone explain to me the difference between SAMLp and WS-Trust? ADFSv2 gives me a choice between these options and I'm not sure which to choose.

share|improve this question

2 Answers

up vote 3 down vote

WSTrust is a standard which is specifies how to encrypt/decrypt/sign SOAP messages and how to bind security tokens to a SOAP message.

SAML tokens are an example of a security token that could be bound to a SOAP message.

The SAML protocol provides a standard way to acquire, release and renew SAML tokens using SSL to protect communications and the XmlDsig standard to protect the token.

share|improve this answer
up vote 3 down vote

SAML P is not SAML protocol but SAML Passive, so I prefer you go for this link http://www.netframeworkdev.com/claims-based-access-platform-cba-codenamed-geneva/protocol-transition-from-saml-20-passive-to-wsfederation-passive-70715.shtml

share|improve this answer
Does that mean there aren't security benefits of one over the other? – makerofthings7 Nov 22 '10 at 17:14
In regards to your edit, I believe there are other forms of SAML that ADFSv2 does not support, like Backchannel among others. Siteminder OTOH should handle this. – makerofthings7 Nov 22 '10 at 21:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.