Project: talendesb
Issue TESB-484: Add a section in the GettingStarted Guide how to use authentication policies & STS
As a Developer I want to learn how to secure my services and clients and how to take advantage of the CXF STS. Extend the Rent a Car demo to show how the service can be secured by the new Authenication Interceptor (STS Client) and the SAMl Tokens provided by the STS and the existing CXF Authentication Inteceptor. Content * What is an STS, what is the advantage of having an STS compared to have to configure everything locally on clients and services.	* A diagram about the flow between client STS, and client provider what are artifacts that are exchanged.	* Describe how to install and run the STS. If possible use the jetty maven plugin for this., Describe what has to be configured, e.g. keystore	* Describe what has to be configured on the client side / service side and what the purpose is.	* Decribe how to deploy and run the demo.	* Describe how to uninstall the demo Provide the necessary configuration files and extend the maven build to create artifacts usable for the demo. For the tutorial use X509 Certs (best use the one already provided with the STS itself so it has not to be reconfigured. Server should return a SAML 2.0 token. Note Feature might involvet to male sure STS is really included in CXF 2.4 and to synchronize with Dan. Acceptance Criteria PO or other person with similar background must be able to get the demo running within 15 minutes.
Story points: 3