Difference between Authentication Profile and WS Security profile ?
Can someone please explain me the Difference between Authentication Profile and WS Security profile in simple terms.
I found following definitions on pdn help for both of them and are quite the same, hence i want exact difference.
WS Security Profile
Enable Web Services Security (WS Security) on a SOAP connection to securely move messages to and from your application. After WS Security is enabled, any SOAP message moving through a connection will do so securely.
Enable authentication HTTP Basic, NTLM, OAuth 1.0 on SOAP, HTTP, or DotNet connections and OAuth 2.0 on REST connections to securely move messages to and from your application. After authentication is enabled, any outgoing message that moves through a connection will do so securely.
We use Authentication Profile to setup single-sign-on profile. It’s meant for that purpose, i.e. for authentication, even though it may go through SOAP. Whereas WS Profile is more directed towards web services security profile.
There are many links on the web that discuss Web Services Security and they may offer more insight into this.