Project news

Web Services Security V1.1.1 approved as an OASIS Standard

We are pleased to announce that Web Services Security Version 1.1.1 has been approved by the membership as an OASIS Standard [1].

The call to vote was announced on 3 May 2012 [2] and closed 18 May 2012. A minimum of 48 affirmative votes were needed in order to win approval. The finally vote tally was 68.

WSS-M v1.1.1 [3] integrates specific error corrections or editorial changes to the preceding Web Services Security specifications. It is a multi-part specification consisting of:

– Web Services Security Kerberos Token Profile
– Web Services Security Rights Expression Language (REL) Token Profile
– Web Services Security SAML Token Profile
– Web Services Security: SOAP Message Security Version
– Web Services Security SOAP Message with Attachments (SwA) Profile
– Web Services Security Username Token Profile
– Web Services Security X.509 Certificate Token Profile Version

Statements of Use were received from Tibco Software Inc, Oracle Corporation and IBM Corporation. More information can be found on the TCs web page at http://www.oasis-open.org/committees/wss-m/.

TC Administration will now prepare and publish the final OASIS Standard and notify members when it is available.

Our congratulations to the members of the TC and to the community of implementers, developers and users who have brought the work successfully to this milestone

=== Additional information

[1] http://www.oasis-open.org/committees/ballot.php?id=2221

[2] http://lists.oasis-open.org/archives/members/201205/msg00001.html

[3] The HTML versions of the Candidate OASIS Standard can be found at:

Web Services Security Kerberos Token Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-KerberosTokenProfile-v1.1.1-cos01.html

Web Services Security SAML Token Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-SAMLTokenProfile-v1.1.1-cos01.html

Web Services Security: SOAP Message Security Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-SOAPMessageSecurity-v1.1.1-cos01.html

Web Services Security SOAP Message with Attachments (SwA) Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-SwAProfile-v1.1.1-cos01.html

Web Services Security Username Token Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-UsernameTokenProfile-v1.1.1-cos01.html

Web Services Security Rights Expression Language (REL) Token Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-rel-token-profile-v1.1.1-cos01.html

Web Services Security X.509 Certificate Token Profile Version 1.1.1
http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/wss-x509TokenProfile-v1.1.1-cos01.html

XML Schemas: http://docs.oasis-open.org/wss-m/wss/v1.1.1/cos01/xsd/