Skip to main content

XML namespace

WS-Security extensions

Authentication and signing headers for SOAP — the UsernameToken and BinarySecurityToken that enterprise services expect in the envelope header.

xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

WS-Security puts credentials in the SOAP header rather than in the transport. <wsse:Security> holds a <wsse:UsernameToken> for password authentication, or a <wsse:BinarySecurityToken> carrying a certificate, alongside the XML Signature elements that sign the body.

The URI is the single most awkward namespace identifier in common use: it ends in .xsd, is nearly a hundred characters long, and exists in several near-identical variants across the WS-* family. Copy it exactly — one that differs by a year or a version number is a different namespace and a rejected message.

It remains current in practice because the banking, insurance and government integrations that adopted SOAP have not moved off it.

URI
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
Prefix
wsse
Elements
SecurityUsernameTokenUsernamePasswordBinarySecurityTokenNonce

Specification: OASIS WS-Security 1.1

Get started

Bring order to the XML your team can't afford to ignore.

Create a free account and get a private workspace to search, validate, diff, and monitor your XML feeds, sitemaps, schemas, and vendor integrations.