I'm presenting a TechEd session in the Connected Systems track on how to use Web Services Enhancements 2.0 to secure web services. TechEd looks like being a mini-WSE festival, with Aaron Skonnard doing the pre-conference on Sunday, Keith "My blog has gone" Ballinger talking up a storm on messaging over multiple machines and networks, plus loads of other applied web services talks.
In my session I'm going to cover all of the security features in WSE using as many code demonstrations as I can fit it. I'll cover the basics such as security tokens, signing and encrypting before moving on to more advanced topics such as token issuing and establishing secure conversations. I'll show how WSE 2.0 allows all of this to be done with code as well as policy and configuration files. The best part is that straight afterwards you'll be able to go and do some Hands On Labs authored by Aaron Skonnard covering these topics. How's that for in-depth educational experience?
Here's the official description
CTS302 Connected Systems: Using Web Services Enhancements v2.0 (WSE) to Secure Web Services
Wednesday, May 26 2:00 PM- 3:15 PM, Room 10
Speaker(s): Benjamin Mitchell
Track(s): Connected Systems, Developer Tools and Technologies, Security
Web Services are being used to cross application boundaries, especially between enterprises. Such interactions need to be secure. See how to use WSE v2.0 and the security protocols that it implements to secure Web service interactions within and beyond the Trust domain
For those interested in doing some background reading before the event, I strongly recommend WS-Security Drilldown in Web Services Enhancements 2.0 by Don Smith. Rebecca Dias thinks its the best article she's read on WS-Security and I'd agree. Also Hervey Wilson's blog mentions some truly magical features that will whet your appetite for what you could see.