
Chapter 9. IMS Enterprise Suite V2.1 349
9.7.2 Web services security
To help you understand the WS-security implementation in combination with SAML, this
section begins with a general overview of security for web services. You can use two types of
security: transport-level security and message-level security (Figure 9-26), as explained here.
Figure 9-26 Message security and transport security
Transport-level security (for example, HTTPS)
This is a point-to-point security model where the channel is protected between two parties.
Transport security starts with a SSL/Transport Layer Security (TLS) handshake between
two transport endpoints, and creates ...