The PingFederate WS-Trust STS allows organizations to extend SSO identity management to web services. (For information about WS-Trust and the role of an STS, see Web services standards.)

The WS-Trust STS can be configured for partner connections independently or in conjunction with browser-based SSO for either an IdP or an SP deployment. The STS is bundled with separate plug-ins for standard SAML (Security Assertion Markup Language) token processing and generation (see Token processors and generators).