3.1.5.4 Issuing a Security Token by Responding to a wsignin1.0 Request Message

This section describes the generic message processing performed by either a requestor IP/STS or a resource IP/STS (a component of a relying party specified in section 3.3) when issuing a security token. IP/STS is used generically to see either a requestor IP/STS or a resource IP/STS in the following subsections.

The generic processing model for responding to a wsignin1.0 message is specified to consist of the following steps, as described in the following subsections:

• Protocol Activation (section 3.1.5.4.1)

• Message Validation (section 3.1.5.4.2)

• User Identification and Authentication (section 3.1.5.4.3)

• User Attribute Retrieval (section 3.1.5.4.4)

• Claim Mapping (section 3.1.5.4.5)

• SAML Assertion Construction (section 3.1.5.4.6)

• Response Message Processing (section 3.1.5.4.7)