Re: Trust between multiple STS

2014-05-28 Thread Colm O hEigeartaigh
Yes, importing the trusted certs in the various STS instances should work. Another alternative is to use a distributed TokenStore implementation (such as the Hazelcast one in sts-core), which means that the STS instances all share the same cache + should then automatically trust a token issued by

RE: Trust between multiple STS

2014-05-28 Thread Andrei Shakirin
To: users@cxf.apache.org Subject: Re: Trust between multiple STS Yes, importing the trusted certs in the various STS instances should work. Another alternative is to use a distributed TokenStore implementation (such as the Hazelcast one in sts-core), which means that the STS instances all share

RE: Trust between multiple STS

2014-05-28 Thread Stephen.CTR.Chappell
: Wednesday, May 28, 2014 8:11 AM To: users@cxf.apache.org Subject: Re: Trust between multiple STS Yes, importing the trusted certs in the various STS instances should work. Another alternative is to use a distributed TokenStore implementation (such as the Hazelcast one in sts-core), which means

RE: Trust between multiple STS

2014-05-28 Thread Stephen.CTR.Chappell
Thanx, Andrei, I will give it a look. Stephen W. Chappell -Original Message- From: Andrei Shakirin [mailto:ashaki...@talend.com] Sent: Wednesday, May 28, 2014 8:20 AM To: users@cxf.apache.org Cc: Chappell, Stephen CTR (FAA) Subject: RE: Trust between multiple STS Hi, If you choose