Configure Outbound Secure Conversation

The following are the steps to establish outbound secure conversation between a and some STS (Security Token Service) or back-end service:
gateway
The following are the steps to establish outbound secure conversation between a
API Gateway
and some STS (Security Token Service) or back-end service:
  1. Check if there is a secure conversation session mapping to the authenticated user and the back-end service. 
    Use the Look Up Outbound Secure Conversation Session Assertion.
  2. Generate a new RST SOAP message to request a security token (either a Security Context Token or a SAML Token). 
    Use the Build RST SOAP Request Assertion.
  3. Apply the necessary decoration requirements to the RST SOAP message, such as adding WS-Addressing, adding UsernameToken, or configuring WS-Security decoration.
  4. Send the RST Request to a back-end service or an STS using the Route via HTTP(S) Assertion.
  5. Process the RSTR Response SOAP message to extract the security token (either a Security Context Token or a SAML Token). 
    Use the Process RSTR Response Assertion.
  6. Establish a secure connection and save (or cache) the secure conversation session by using the Establish Outbound Secure Conversation Assertion.
  7. If the session is no longer used, you may cancel the session using the Cancel Security Context Assertion.