Recently in Security Category

<s:Envelope ...>

  <s:Header>

    ...

    <o:Security ...>

      <!-- These are the credentials of the proxy -->

      <o:UsernameToken ...>

        <o:Username>proxy</o:Username>

        <o:Password>*****</o:Password>

      </o:UsernameToken>

    </o:Security>

  </s:Header>

  <s:Body>

    <t:RequestSecurityToken ...>

     ...

      <t:OnBehalfOf>

        <!-- These are the credentials of the subject -->

        <UsernameToken ...>

          <Username>subject</Username>

          <Password>*****</Password>

        </UsernameToken>

      </t:OnBehalfOf>

      <t:RequestType>

        http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</t:RequestType>

    </t:RequestSecurityToken>

  </s:Body>

</s:Envelope>

2010-03-17 12:05:21,481 tid:066b8dea8 DEBUG [org.sourceid.saml20.bindings.LoggingInterceptor] Handle Exception (http://schemas.xmlsoap.org/soap/envelope/).
org.sourceid.wstrust.handlers.WSTrustException: STS requests with more than one token are unsupported.
                at org.sourceid.wstrust.handlers.WSTrustBaseRequestHandler.ensureOneToken(WSTrustBaseRequestHandler.java:187)

1. There must be no additional security tokens in the SOAP header, and the security token of the subject must be embedded directly in the OBO element of the RST; or
2. The OBO element must contain a SecurityTokenReference element that points to the security token of the subject in the SOAP header.

using System;

using System.Net;

using System.ServiceModel;

using System.ServiceModel.Channels;

using System.ServiceModel.Security;

using System.Text;

using Microsoft.IdentityModel.Protocols.WSTrust;

using Microsoft.IdentityModel.Protocols.WSTrust.Bindings;

namespace ConsoleApplication1

{

    class Program

    {

        private const string userName = "john";

        private const string password = "Password1";

        private const string appliesTo = "http://www.valid.com";

        private const string stsAddress = "https://computer:9031/idp/sts.wst";

        static void Main()

        {

            IgnoreCertificateValidation();

            var rstr = RequestSecurityToken();

            PrintRequestSecurityTokenResponse(rstr);

            Console.ReadLine();

        }

        private static void IgnoreCertificateValidation()

        {

            ServicePointManager.ServerCertificateValidationCallback = (sender,

                cert, chain, errors) => true;

        }

        private static void PrintRequestSecurityTokenResponse(

            RequestSecurityTokenResponse rstr)

        {

            Console.WriteLine("Security token issued by PingFederate:");

            Console.WriteLine(rstr.RequestedSecurityToken.SecurityTokenXml

                .InnerXml);

        }

        private static RequestSecurityTokenResponse RequestSecurityToken()

        {           

            var factory = GetChannelFactory();

            var rst = new RequestSecurityToken(WSTrustFeb2005Constants

                .RequestTypes.Issue)

            {

                AppliesTo = new EndpointAddress(appliesTo)

            };

            RequestSecurityTokenResponse rstr;

            var channel = factory.CreateChannel() as WSTrustChannel;       

            var token = channel.Issue(rst, out rstr);

            return rstr;

        }

        private static WSTrustChannelFactory GetChannelFactory()

        {

            var binding = GetBinding();

            var endpoint = new EndpointAddress(stsAddress);

            var factory = new WSTrustChannelFactory(binding, endpoint)

            {

                TrustVersion = TrustVersion.WSTrustFeb2005

            };

            factory.Credentials.UserName.UserName = userName;

            factory.Credentials.UserName.Password = password;

            return factory;

        }

        private static Binding GetBinding()

        {

            var binding = new CustomBinding();

            binding.Elements.AddRange(new BindingElement[]

            {

                SecurityBindingElement

                    .CreateUserNameOverTransportBindingElement(),

                new TextMessageEncodingBindingElement(MessageVersion

                    .Soap11WSAddressingAugust2004, Encoding.UTF8),

                new HttpsTransportBindingElement(),

            });

            return binding;

        }

    }

}