CardSpace - STS how to restring Relaying Parties

[Marcin Daczkowski]

Hello,
I am writing an application which uses CardSpace in order to provide
Single-Sign-On functionality. After investigating some samples I wrote
desired Security-Token-Service.

However, I have the problem with restricting issuing security token only to
registered relaying parties.

As far as I know that it is "out-of-box" functionality of CardSpace.
Unfortunatelly I cannot find any information/example how to do that. I mean
how to change my STS service policy (I use WCF in STS implementation) in
order to receive some RP credentials which I may check and compare to STS
registered RP list.

Thanks in advance,
Marcin Daczkowski

 

[Marcin Daczkowski]

I have found the answet to my quetion. To restrict RP one need to attach
RequireAppliesTo parto managed card. When it is done RST will contain
AppliesTo part with endpoint url and public key delivered in trusted way (I
suppose) so simple compare on public key can do the thing.

Marcin