Been researching this for awhile, and have not come up with a definitive answer:
I have a WSE 3.0 web service that is secured through a mutual authentication scheme (both client and service tokens required)
We are adding another consumer of these web servcies, and we want to issue another client certificate to this new user.
Use the policy files to do this;
If this can not be done just in policy files, how can I do this in code? I understand what needs to be done, but not sure what approach to take to hitch into WSE processing to get the token from the request and see if it is valid.
I've seen one post about this in this formum, but the answer was just "Problem Solved". Not very helpful ;-).