Web Services Security: SOAP Message Security

WSS: SOAP Message Security provides three main mechanisms that can be used independently or together:

• The ability to send security tokens as part of a message, and for associating the security tokens with message content
• The ability to protect the contents of a message from unauthorized and undetected modification (message integrity)
• The ability to protect the contents of a message from unauthorized disclosure (message confidentiality).

WSS: SOAP Message Security can be used in conjunction with other Web service extensions and application-specific protocols to satisfy a variety of security requirements.