The WS-SecureConversation specification defines a Web service security protocol to enable more efficient processing of message exchanges between a Web service and a client. In order to achieve this efficiency, an interchange occurs between the client and service using Web Services Enhancements 2.0 to establish a secure context to maintain state information on the client and service. WSE 2.0 supports a secure conversation between a single service instance and a client. This article discusses techniques for extending the WSE 2.0 implementation to support managing the secure context token state across a farm hosting multiple instances of a service. (20 printed pages)
How to use Web Services Enhancements 2.0 to implement security, trust, and secure conversations in Web services architecture. Also covers the security-related changes from Web Services Enhancements 1.0. (46 printed pages)