Well, I'm barely beginning to get involved in this subject.
I've found this pretty detailed tutorial, but it seems a little outdated.
Besides I guess that in Java 6 Metro is the way to go (am I right???)
What are the frameworks, books and online resources to to investigate/read?
Edit: Another pretty good tutorial, with Metro's WSIT is "Building Trust in Web Services with Security Token Service".