Establishing a Secure Conversation with Custom Security Tokens

When a custom security token service is configured to issue custom security tokens, a SOAP message sender can use the security token to sign and/or encrypt a SOAP message between itself and the target Web service.

For an example of how to create a security token service that issues SAML tokens, see SAML STS.