Renews an existing SAML token.

Method Signature

Renew (token : RequestSecurityTokenType) returns RequestSecurityTokenResponseType

Parameter

token : RequestSecurityTokenType – Security token request containing a SAML token previously obtained from a vCenter Single Sign-On server. The token must be valid (not expired). The following RequestSecurityTokenType elements are required for a Renew request; the remaining elements are optional.

  • RequestType – Must be the URL “http://docs.oasis-open.org/ws-sx/ws-trust/200512/Renew”.
  • RenewTarget – Identifies the SAML token to be renewed.
  • Sig attribute (UseKey element) – Specifies a security token that contains an existing certificate key for subject confirmation.
  • Context attribute – Required if you include a BinaryExchangeType element for SSPI authentication.

Return Value

RequestSecurityTokenResponseType – Response containing the renewed token.

Comments

You can renew holder-of-key tokens only. In addition to the the required token request elements shown above, the Renew request SOAP header must contain security elements according to the security policy.