3.3.5.2 Receiving a Security Token by Processing a wsignin1.0 Response Message

This message is received by a resource IP/STS from a requestor IP/STS. The purpose is to accept a security token that was issued for a specific user, with the resource IP/STS as the audience, in response to a wsignin1.0 request message. The generic model for relying party processing of a wsignin1.0 response message is specified to consist of the following steps, specified in the following sections:

• Protocol Activation (section 3.3.5.2.1)

• Message Validation (section 3.3.5.2.2)

• User Identification and Authentication (section 3.3.5.2.3)

• User Attribute Retrieval (section 3.3.5.2.4)

• Claim Mapping (section 3.3.5.2.5)

• Resource Access Control (section 3.3.5.2.6)