The mechanism defined in WS-Security provides some basic mechanisms that can define security messages on this basis. This specification defines an extension to allow the establishment and sharing of security contexts and derive session keys.
Click here to read the full story
