Popular Courses

Browse Our Free Resources

  • whitepapers
  • whitepapers
  • webinars
  • blogs

Our Locations

Training Centres

Vancouver, BC
Calgary, AB
Edmonton, AB
Toronto, ON
Ottawa, ON
Montreal, QC
Hunt Valley

locations map


550 6th Av SW
Suite 475
Calgary, AB
T2P 0S2


821A Bloor Street West
Toronto, ON
M6G 1M1


409 Granville St
Suite 902
Vancouver, BC
V6C 1T2

U.S. Office

436 York Road
Suite 1
Jenkintown, PA

Other Locations

Dallas, TX
Miami, FL

Home > Training > SOA for Developers > Designing and Developing Secure Web Services Training

Designing and Developing Secure Web Services Training

Quick Enroll

Course#: WA1791

This is a course designed for the developers and architects that focuses on the security aspects of Web Service development. Through lecture and hands on exercise this class will teach you the security problems faced by a Web Service consumer or provider and how to solve them through open standards. Topics like authentication, authorization, encryption and non-repudiation are covered. Advanced topics like single sign on and trust based authentication are also covered.


  • Authentication using WS-Security
  • Encryption and non-repudiation using WS-Security
  • WS-Trust
  • WS-Federation
  • SAML
  • Securing REST Web Services

What you will learn


After completing this course, students will be able to:

  • Understand the unique problems with security in Web Services
  • Explain how messages are encrypted using WS-Security
  • Explain how non-repudiation works with WS-Security
  • Explain how authentication works with WS-Security
  • Explain the need for WS-Trust and WS-Federation
  • Understand the key concepts in securing REST style web services.



Developers and architects.



Students should be already familiar with the basics of Web Service development, such as SOAP and WSDL. Some knowledge of Java is required.


  2 days.

Outline of WA1791 Designing and Developing Secure Web Services Training

Chapter 1. Web Services Security (WS-Security)

  • The Challenges
  • Public Key Infrastructure (PKI)
  • Digital Signature
  • Certificates
  • Overview of Web Services Security
  • SOAP Message Security
  • Message Integrity
  • Message Confidentiality
  • Symmetric Encryption Example
  • Authentication Using Identity Token
  • Authentication
  • Transport Level Security
  • Audit Tracking
  • Identity Assertion Using SAML
  • SAML SOAP Example

Chapter 2. WS-Trust and WS-Federation

  • Review of WS-Security Authentication Model
  • How WS-Trust Works
  • WS-Federation
  • Federation Metadata Example
  • Requesting a Token
  • Dynamic Conversation
  • Summary

Chapter 3. Interoperability of WS-Security

  • Interoperability Challenges
  • Recall WS-Security
  • Platform Run-Time Issues
  • Hints
  • Recall: WS-I
  • Basic Security Profile v1.0
  • Using Basic Security Profile 1.0
  • BSP 1.0 Details
  • BSP 1.0 Highlights
  • Summary

Chapter 4. WS-Secure Conversation

  • Review of WS-Security and WS-Trust
  • Need for a Security Context
  • Basic Usage of WS-Secure Conversation
  • Establishing a Security Context
  • Building on WS-Trust
  • Using the Security Context Token
  • Alterations to the Security Context Token
  • Summary

Chapter 5. REST Services

  • Many Flavors of Services
  • Understanding REST
  • Principles of RESTful Services
  • REST Resource Examples
  • SOAP Equivalent Examples
  • REST vs SOAP Communication
  • More REST vs SOAP
  • REST vs SOAP Summary
  • Famous RESTful Services
  • Additional Resources
  • Summary

Chapter 6. Securing REST Services

  • RESTful Security - Ideal Approach
  • RESTful Security - Practical Approach
  • Protecting the QueryString
  • REST and Access IDs
  • AWS and HMAC
  • Securing Resources
  • REST Security Concerns
  • Comprehensive REST Security
  • Summary
Address Start Date End Date
Instructor Led Virtual 09/25/2017 09/26/2017
Instructor Led Virtual 10/16/2017 10/17/2017
We regularly offer classes in these and other cities. Atlanta, Austin, Baltimore, Calgary, Chicago, Cleveland, Dallas, Denver, Detroit, Houston, Jacksonville, Miami, Montreal, New York City, Orlando, Ottawa, Philadelphia, Phoenix, Pittsburgh, Seattle, Toronto, Vancouver, Washington DC.
*Your name:

*Your e-mail:


*Company name:

Additional notes:

We have received your message. A sales representative will contact you soon.

Thank you!.

more details
buy this course

09/25/2017 - Online Virtual

10/16/2017 - Online Virtual

Other Details

Register for a courseware sample

It's simple, and free.


Thank You!

You will receive an email shortly containing a link to download the requested sample of the labs for this course.