views:

333

answers:

2

Well, I'm barely beginning to get involved in this subject.

I've found this pretty detailed tutorial, but it seems a little outdated.

Besides I guess that in Java 6 Metro is the way to go (am I right???)

What are the frameworks, books and online resources to to investigate/read?

Edit: Another pretty good tutorial, with Metro's WSIT is "Building Trust in Web Services with Security Token Service".

A: 

You'd best look into CXF for implementing any sort of web services with enterprise styles of java. It has a nice and easy implementation of tokens.

Martlark
A: 

The OWASP ESAPI has also a token feature.

mlaverd