---
title: WS-Trust STS
description: The PingFederate WS-Trust Security Token Service (STS) allows organizations to extend single-sign on (SSO) identity management (IdM) to web services.
component: pingfederate
version: 13.1
page_id: pingfederate:introduction_to_pingfederate:pf_wstrust_sts
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/introduction_to_pingfederate/pf_wstrust_sts.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  connection-based-policy: Connection-based policy
  token-processor-and-generator: Token processor and generator
  wsc-and-wsp-support: WSC and WSP support
  sts-oauth-integration: STS OAuth integration
---

# WS-Trust STS

The PingFederate WS-Trust Security Token Service (STS) allows organizations to extend single-sign on (SSO) identity management (IdM) to web services.

You can configure the WS-Trust STS for partner connections independently or in conjunction with browser-based SSO for either an identity provider (IdP) or a service provider (SP) deployment. The STS is bundled with separate plug-ins for standard SAML token processing and generation.

For information about WS-Trust and the role of an STS, see [Web services standards](pf_web_service_standard.html).

## Connection-based policy

PingFederate employs a partner-connection configuration for both IdP and SP roles, which enables the association of web services authentication policies with federation partners. For more information, see [Connection-based policy](pf_conn_based_poli.html).

## Token processor and generator

PingFederate provides support for a variety of security-token formats through token processors and generators. For more information, see [Token processors and generators](pf_token_proc_and_gen.html).

## WSC and WSP support

Ping Identity provides the Java client software development kit (SDK) for enabling web service applications to interact with the PingFederate STS. For more information, see [WSC and WSP support](pf_wsc_and_wsp_supp.html).

## STS OAuth integration

PingFederate STS provides several ways to facilitate the use of issued tokens with an OAuth authorization server (AS). For more information, see [STS OAuth integration](pf_sts_oauth_integr.html).