OGC 07-118r8 User Management Interfaces for EO
36 Copyright © 2010 Open Geospatial Consortium, Inc.
7.1.4 Failed Request Security Token
If the RST cannot provide the RSTR due to a failure failed authentication, invalid signature, invalid parameters, resource unavailable, etc, then the SOAP Fault mechanism shall be used,
following the recommendation of WS-Trust 1.3 for error handling see section 11 of [NR23].
An example is given below, for the case of a failed authentication:
?xml version=1.0 encoding=UTF-8? soapenv:Envelope xmlns:soapenv=http:schemas.xmlsoap.orgsoapenvelope
xmlns:wst=http:schemas.xmlsoap.orgws200502trust soapenv:Body
soapenv:Fault faultcodewst:FailedAuthenticationfaultcode
faultstringAuthentication failedfaultstring soapenv:Fault
soapenv:Body soapenv:Envelope
7.1.5 WSDL
The WSDL is given below for the Security Token Service, without the Bindings and Services elements. This WSDL have been obtained by updating reference files from WS-Trust 1.3:
http:docs.oasis-open.orgws-sxws-trust200512ws-trust-1.3.wsdl
Note that this WSDL refers to the local schema file ws-trust.xsd, which is a restricted version of the standard WS-Trust schema http:docs.oasis-open.orgws-sxws-trust200512ws-trust-
1.3.xsd.
?xml version=1.0 encoding=UTF-8? wsdl:definitions xmlns:tns=http:docs.oasis-open.orgws-sxws-
trust200512 xmlns:wst=http:docs.oasis-open.orgws-sxws-trust200512 xmlns:soap12=http:schemas.xmlsoap.orgwsdlsoap
xmlns:soap=http:schemas.xmlsoap.orgwsdlsoap xmlns:wsdl=http:schemas.xmlsoap.orgwsdl
xmlns:xs=http:www.w3.org2001XMLSchema targetNamespace=http:docs.oasis-open.orgws-sxws-trust200512
wsdl:types xs:schema
xs:import namespace=http:docs.oasis-open.orgws-sxws- trust200512 schemaLocation=ws-trust.xsd
xs:schema wsdl:types
wsdl:message name=RequestSecurityTokenMsg wsdl:part name=request element=wst:RequestSecurityToken
wsdl:message wsdl:message name=RequestSecurityTokenResponseMsg
wsdl:part name=response element=wst:RequestSecurityTokenResponse
wsdl:message wsdl:portType name=SecurityTokenService
wsdl:operation name=RequestSecurityToken wsdl:input message=tns:RequestSecurityTokenMsg
wsdl:output message=tns:RequestSecurityTokenResponseMsg wsdl:operation
wsdl:portType wsdl:definitions
OGC 07-118r8 User Management Interfaces for EO
37 Copyright © 2010 Open Geospatial Consortium, Inc.
Figure 10: Security Token Service WSDL
7.2 Service Request