Editing WS-Security (section)

{{Short description|Extension of SOAP}}
{{More citations needed|date=July 2024}}

{{Use dmy dates|date=January 2022}}
'''Web Services Security''' ('''WS-Security''', '''WSS''') is an extension to [[SOAP (protocol)|SOAP]] to apply security to [[Web service]]s. It is a member of the [[List of Web service specifications|Web service specifications]] and was published by [[OASIS (organization)|OASIS]].

The protocol specifies how integrity and confidentiality can be enforced on messages and allows the communication of various security token formats, such as [[Security Assertion Markup Language]] (SAML), [[Kerberos (protocol)|Kerberos]], and [[X.509]]. Its main focus is the use of [[XML Signature]] and [[XML Encryption]] to provide end-to-end security.