---
title: Web Access Management (WAM) Token Translator
description: The PingFederate Web Access Management (WAM) Token Translator provides a Token Processor and a Token Generator for use with the PingFederate WS-Trust Security Token Service (STS).
component: webAccessManagement
page_id: webAccessManagement::pf_wam_tt
canonical_url: https://docs.pingidentity.com/integrations/webAccessManagement/pf_wam_tt.html
revdate: June 27, 2024
section_ids:
  intended-audience: Intended audience
  system-requirements: System requirements
---

# Web Access Management (WAM) Token Translator

The PingFederate Web Access Management (WAM) Token Translator provides a Token Processor and a Token Generator for use with the PingFederate WS-Trust Security Token Service (STS).

The Token Processor allows an identity provider (IdP) STS to accept and validate a WAM session token from a Web Service Client (WSC) and then map user attributes into a SAML token for the WSC to send to a Web Service Provider (WSP). The Token Generator allows a Service Provider (SP) STS to issue a WAM session token for a WSP, including mapped attributes from an incoming SAML token.

|   |                                                                                                                                                                                                                                                                                                                                                                                                                |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | The Token Translator is designed to work with WAM products from multiple vendors. A WAM plug-in is required to connect the Token Translator with each third-party system. This kit ships with WAM plug-ins compatible with Oracle Access Manager (OAM) 10g and 11g, and with RSA Access Manager 6.1. A simple software development kit (SDK) is also included to create custom WAM plug-ins for other systems. |

If you are creating a WAM plug-in for any third-party product other than OAM and RSA Access Manager, you must complete the tasks in the WAM plug-in SDK `README.txt` file located in the `<token_translator_install_dir>/sdk` directory.

|   |                                                                                                                                                                                                                                                                                     |
| - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Ping Identity provides an SDK for enabling Web Service applications (Client or Provider) to interact with the PingFederate STS. The SDK is available for download on the [PingFederate server add-ons page](https://www.pingidentity.com/en/resources/downloads/pingfederate.html). |

## Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following resources:

* The following sections of the PingFederate documentation:

  * [WS-Trust STS configuration](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_wstrust_sts_config.html)

Please consult the WAM documentation tool if you encounter any difficulties in areas not directly associated with PingFederate or the WAM Token Translator.

## System requirements

* PingFederate 6.x or later

* WAM plug-in for the desired third-party system, built and deployed per the WAM plug-in SDK documentation

* Associated vendor-supplied libraries to support the WAM plug-in you are using

* Fully functional WAM plug-ins for OAM and RSA are included in the WAM Token Translator package.

* Separate third-party Web Agent configured using the WAM server administrative software