# Table of contents:

Introduction
Client/Request
- soap12:Envelope
  - soap12:Header
  - soap12:Body
    - ps:RequestMultipleSecurityTokens
      - wst:RequestSecurityToken
        
        wst:RequestType
        
        wsp:AppliesTo
        
        wsa:EndpointReference
        
        wsa:Address
        
        wsp:PolicyReference
Server/Response
- S:Envelope
  - S:Header
  - S:Body
    - wst:RequestSecurityTokenResponseCollection
      - wst:RequestSecurityTokenResponse
        
        wst:TokenType
        
        wsp:AppliesTo
        
        wsa:EndpointReference
        
        wsa:Address
        
        wst:Lifetime
        
        wst:RequestedSecurityToken
        
        [urn:passport:legacy children]
        
        EncryptedData
        
        EncryptionMethod
        
        ds:KeyInfo
        
        CipherData
        
        [urn:passport:compact children]
        
        wsse:BinarySecurityToken
        
        wst:RequestedAttachedReference
        
        wsse:SecurityTokenReference
        
        wsse:Reference
        
        wst:RequestedUnattachedReference
        
        wsse:SecurityTokenReference
        
        wsse:Reference
        
        wst:RequestedProofToken
Examples
- Client/Request
- Server/Response

# Introduction

The Passport Request Security Token SOAP service, version 2 (RST2) is a HTTP-based authentication system that was introduced with Client Version 14.0.3921, and is the sequel to the original Passport Request Security Token service.

Compared to it's predecessor, it now features SOAP 1.2 and 2004-2005 versions of the namespaces used.
The protocol itself is still based on WS-Trust, with the same proprietary extensions (the ps and psf namespaces).

The endpoint is called RST2.srf, residing on the login.live.com domain.

Client Versions ranging from 5.0.0124 until 7.5.0160, and all versions of the MacOS client since 3.5 use the Passport SSI 1.4 system for authentication.
For Client Versions 7.5.0160 to 9.0.1407, read the original Passport Request Security Token service article.

# Client/Request

The following sub-headers are XML elements for the client's request.

# soap12:Envelope

This element has eight attributes:

xmlns:soap12: This is always set to http://www.w3.org/2003/05/soap-envelope.
xmlns:wsse: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd.
xmlns:saml: This is always set to urn:oasis:names:tc:SAML:1.0:assertion.
xmlns:wsp: This is always set to http://schemas.xmlsoap.org/ws/2004/09/policy".
xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
xmlns:wsa: This is always set to http://www.w3.org/2005/08/addressing.
xmlns:wssc: This is always set to http://schemas.xmlsoap.org/ws/2005/02/sc.
xmlns:wst: This is always set to http://schemas.xmlsoap.org/ws/2005/02/trust.

# soap12:Header

This element has five children:

<wsa:Action>: Described below.
<wsa:To>: Described below.
<wsa:MessageID>: Described below.
<ps:AuthInfo>: Described below.
<wsse:Security>: Described below.

# wsa:Action

This element has only one attribute:

soap12:mustUnderstand: This is always set to 1.

This element always contains the value http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue.

# wsa:To

This element has only one attribute:

soap12:mustUnderstand: This is always set to 1.

This element always contains the value HTTPS://login.live.com:443//RST2.srf.

# wsa:MessageID

This element contains the amount of seconds that have passed since January 1st, 1970.

# ps:AuthInfo

This element has two attributes:

xmlns:ps: This is always set to http://schemas.microsoft.com/Passport/SoapServices/PPCRL.
Id: This is always set to PPAuthInfo.

This element has five children:

<ps:HostingApp>: The GUID (with braces) of the client that is authenticating.
<ps:BinaryVersion>: A number, usually 5.
<ps:UIVersion>: This is always set to 1.
<ps:Cookies>: This element is always empty.
<ps:RequestParams>: A base64-encoded binary structure that seems to be in the format of a 32-bit little endian integer of the amount of parameters, then an 32-bit little endian integer length and character data for the side of the pair, with there being a key side of the pair, and a value side of the pair.

# wsse:Security

This element has two children:

<wsse:UsernameToken>: Described below.
<wsse:Timestamp>: Described below.

# wsse:UsernameToken

This element has only one attribute:

wsu:Id: This is always set to user.

This element has two children:

<wsse:Username>: The XML-encoded user handle of the user authenticating.
<wsse:Password>: The XML-encoded password of the user authenticating.

# wsu:Timestamp

This element has only one attribute:

Id: This is always set to Timestamp.

This element has two children:

<wsu:Created>: The ISO 8601 timestamp of when this request was generated
<wsu:Expires>: The ISO 8601 timestamp of when this request expires.

# soap12:Body

This element only contains the <ps:RequestMultipleSecurityTokens> element.

# ps:RequestMultipleSecurityTokens

This element has two attributes:

xmlns:ps: This is always set to http://schemas.microsoft.com/Passport/SoapServices/PPCRL.
Id: This is always set to RSTS.

This element contains one or more <wst:RequestSecurityToken> elements.

# wst:RequestSecurityToken

This element has only one attribute:

Id: Is set to RST#, with # incrementing every use of this element, starting from 0.

# wst:RequestType

This element always contains the value http://schemas.xmlsoap.org/ws/2005/02/trust/Issue.

# wsp:AppliesTo

This element only contains the <wsa:EndpointReference> element.

# wsa:EndpointReference

This element only contains the <wsa:Address> element.

# wsa:Address

This element contains the target domain for this security token:

http://Passport.NET/tb: Legacy authentication, One of these is always required (usually as RST0). Does not set a <wsp:PolicyReference>.
messengerclear.live.com: The domain used for authenticating to the Messenger Service using the SSO scheme.
Uses a policy challenge defined by the Notification Server (NS), which is usually MBI_KEY_OLD.
messenger.msn.com: The domain used for authenticating to the Messenger Service using the TWN scheme.
Uses an authentication ticket (?...) defined by the Notification Server (NS), or ?id=507 if using the SSO scheme to authenticate.
contacts.msn.com: Used for the Address Book Service.
Uses an authentication ticket (?...) or MBI (since MSNP15). Required since MSNP13.
messengersecure.live.com: A secure version of messenger.msn.com, with unknown use. Uses MBI_SSL.
spaces.live.com: The blog service. Uses MBI.
livecontacts.live.com: The Live Contacts ABI, apparently a simplified version of the Address Book Service.
storage.msn.com: The user storage service. Uses MBI_SSL. Required for MSNP15's roaming user content support.

# wsp:PolicyReference

This optional element has only one attribute:

URI: The security policy of this security token:
- MBI_KEY_OLD: Calculate a challenge with the server's <wst:BinarySecret> using session key type 1.
- MBI_KEY: Calculate a challenge with the server's <wst:BinarySecret> using session key type 2.
- MBI: No special parameters.
- MBI_SSL: No special parameters and encrypted transport only.
- (any policy starting with ?): Authenticate using a Passport Site ID and other URL parameters. Used for the TWN authentication scheme.

# Server/Response

The following sub-headers are XML elements for the server's response.

# S:Envelope

This element has four attributes:

xmlns:S: This is always set to http://www.w3.org/2003/05/soap-envelope.
xmlns:wsse: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd.
xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
xmlns:wsa: This is always set to http://www.w3.org/2005/08/addressing.

# S:Header

This element has four children:

<wsa:Action>: Described below.
<wsa:To>: Described below.
<wsse:Security>: Described below.
<psf:pp>: Described below.

# wsa:Action

This element has five attributes:

xmlns:S: This is always set to http://www.w3.org/2003/05/soap-envelope.
xmlns:wsa: This is always set to http://www.w3.org/2005/08/addressing.
xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
wsu:Id: This is always set to Action.
S:mustUnderstand: This is always set to 1.

This element always contains the value http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue.

# wsa:To

This element has five attributes:

xmlns:S: This is always set to http://www.w3.org/2003/05/soap-envelope.
xmlns:wsa: This is always set to http://www.w3.org/2005/08/addressing.
xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
wsu:Id: This is always set to To.
S:mustUnderstand: This is always set to 1.

This element always contains the value http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.

# wsse:Security

This element only has one attribute:

S:mustUnderstand: This is always set to 1.

# wsu:Timestamp

This element has two attributes:

xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
Id: This is always set to TS.

This element has two children:

<wsu:Created>: The ISO 8601 timestamp of when this response was generated
<wsu:Expires>: The ISO 8601 timestamp of when this response expires.

# psf:pp

This element has only one attribute:

xmlns:psf: This is always set to http://schemas.microsoft.com/Passport/SoapServices/SOAPFault.

This element has fourteen children:

<psf:serverVersion>: Only observed to be 1.
<psf:PUID>: The user's Passport Unique ID, expressed as a 16-bit capitalized hexadecimal stream.
<psf:configVersion>: The configuration version expressed as a quadruplet.
<psf:uiVersion>: The user interface version expressed as a quadruplet.
<psf:mobileConfigVersion>: The mobile configuration version expressed as a quadruplet.
<psf:appDataVersion>: Only observed to be 1.
<psf:authstate>: This is always set to 0x48803 (PPCRL_AUTHSTATE_S_AUTHENTICATED_PASSWORD) for successful authentications.
<psf:regstatus>: This is always set to 0x0 for successful authentications.
<psf:serverInfo>: This element has the server's identification string and the following three attributes:
- LocVersion: Always set to 0.
- ServerTime: A ISO 8601 timestamp that specifies the time this response was generated.
- BuildVersion: The version of the server.
<psf:cookies>: This element is always empty.
<psf:browserCookies>: This element contains any amount of <psf:browserCookie> elements.
<psf:credProperties>: This element contains any amount of <psf:credProperty> elements.
<psf:extProperties>: This element contains any amount of <psf:extProperty> elements.
<psf:response>: This element is always empty.

# psf:browserCookie

This element has two attributes:

Name: The name of the cookie.
URL: The URL to apply this cookie for.

This element contains the cookie string for this browser cookie.

# psf:credProperty

This element has only one attribute:

Name: The name of the credential property.

This element contains the value for the credential property.

# psf:extProperty

This element has four attributes, three of which are optional:

Name: The name of the extended property.
Expiry: Optional. Sets the cookie expiry if this is a cookie extended property.
Domains: Optional. A semicolon seperated list of domains to apply this cookie extended property for.
IgnoreRememberMe: Optional. If this is set to true, this extended property will ignore the "Remember Me" state.

This element contains the value for the extended property.

# S:Body

This element only contains the <wst:RequestSecurityTokenResponseCollection> element.

# wst:RequestSecurityTokenResponseCollection

This element has seven attributes:

xmlns:S: This is always set to http://www.w3.org/2003/05/soap-envelope.
xmlns:wst: This is always set to http://schemas.xmlsoap.org/ws/2005/02/trust.
xmlns:wsse: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd.
xmlns:wsu: This is always set to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd.
xmlns:saml: This is always set to urn:oasis:names:tc:SAML:1.0:assertion.
xmlns:wsp: This is always set to http://schemas.xmlsoap.org/ws/2004/09/policy.
xmlns:psf: This is always set to http://schemas.microsoft.com/Passport/SoapServices/SOAPFault.

This element contains one or more <wst:RequestSecurityTokenResponse> elements.

# wst:RequestSecurityTokenResponse

This element has six required children and one optional child:

<wst:TokenType>: The type of security token this <wst:RequestSecurityTokenResponse> is.
<wsp:AppliesTo>: Defines what can use this security token.
<wst:Lifetime>: Specifies the lifetime of the security token.
<wst:RequestedSecurityToken>: The security token itself.
<wst:RequestedAttachedReference>: The reference location of where the security token is stored.
<wst:RequestedUnattachedReference>: The reference location of where the security token is stored.
<wst:RequestedProofToken> (Optional): The proof token used for urn:passport:legacy tokens or MBI_KEY_OLD policies.

# wst:TokenType

This element only contains either the value urn:passport:legacy or urn:passport:compact.

# wsp:AppliesTo

This element has only one attribute:

xmlns:wsa: This is always set to http://www.w3.org/2005/08/addressing.

This element only contains the <wsa:EndpointReference> element.

# wsa:EndpointReference

This element only contains the <wsa:Address> element.

# wsa:Address

This element contains the target domain for this security token:

http://Passport.NET/tb: Legacy authentication, One of these is always required (usually as RST0). Does not set a <wsse:PolicyReference>.
messengerclear.live.com: The domain used for authenticating to the Messenger Service using the SSO scheme.
Uses a policy challenge defined by the Notification Server (NS), which is usually MBI_KEY_OLD.
messenger.msn.com: The domain used for authenticating to the Messenger Service using the TWN scheme. Uses an authentication ticket (?...) defined by the Notification Server (NS), or ?id=507 if using the SSO scheme to authenticate.
contacts.msn.com: Used for the Address Book Service.
Uses an authentication ticket (?...) or MBI (since MSNP15). Required since MSNP13.
messengersecure.live.com: A secure version of messenger.msn.com, with unknown use. Uses MBI_SSL.
spaces.live.com: The blog service. Uses MBI.
livecontacts.live.com: The Live Contacts ABI, apparently a simplified version of the Address Book Service.
storage.msn.com: The user storage service. Uses MBI_SSL. Required for MSNP15's roaming user content support.

# wst:Lifetime

This element has two children:

<wsu:Created>: The ISO 8601 timestamp of when this security token was generated.
<wsu:Expires>: The ISO 8601 timestamp of when this security token expires.

# wst:RequestedSecurityToken

This element has different children based on the value of the <wst:TokenType> element.

# [urn:passport:legacy children]

These elements are only included in <wst:RequestedSecurityToken> if the value of <wst:TokenType> element is set to urn:passport:legacy.

# EncryptedData

This element has three attributes:

xmlns: This is always set to http://www.w3.org/2001/04/xmlenc#.
Id: This is always set to BinaryDAToken#, with the # being incremented every use of the <wst:RequestSecurityTokenResponse> element starting from 0.
Type: This is always set to http://www.w3.org/2001/04/xmlenc#Element.

# EncryptionMethod

This empty element has only one attribute:

Algorithm: This is always set to http://www.w3.org/2001/04/xmlenc#tripledes-cbc.

# ds:KeyInfo

This element has only one attribute:

xmlns:ds: This is always set to http://www.w3.org/2000/09/xmldsig#.

This element has only one child:

<ds:KeyName>: Only observed to be http://Passport.NET/STS

# CipherData

This element has only one child:

<CipherValue>: A XML element (with unknown properties and children, likely has a Passport Token somewhere), just 3DES encrypted. (If you know how to decrypt this element, please contact me!)

# [urn:passport:compact children]

These elements are only included in <wst:RequestedSecurityToken> if the value of <wst:TokenType> element is set to urn:passport:compact.

# wsse:BinarySecurityToken

This element has only one attribute:

Id: This is always set to Compact#, with the # being incremented every use of the <wst:RequestSecurityTokenResponse> element starting from 0.

This element contains the Passport Compact Token, which consists of an authentication token and profile parameters as a XML-encoded value. (t=token&p=profile)

# wst:RequestedAttachedReference

This element only contains the <wsse:SecurityTokenReference> element.

# wsse:SecurityTokenReference

This element only contains the <wsse:Reference> element.

# wsse:Reference

This element has only one attribute:

URI: A base64-encoded... something? Not sure. Decodes to 20 bytes. Might be some sort of hash.

# wst:RequestedUnattachedReference

This element only contains the <wsse:SecurityTokenReference> element.

# wsse:SecurityTokenReference

This element only contains the <wsse:Reference> element.

# wsse:Reference

This element has only one attribute:

URI: A base64-encoded... something? Not sure. Decodes to 20 bytes. Might be some sort of hash.

# wst:RequestedProofToken

This optional element has only one child:

<wst:BinarySecret>: The binary secret for this token

# Examples

# Client/Request

POST /RST2.srf HTTP/1.1
Cache-Control: no-cache
Content-Type: application/soap+xml
Content-Length: {data-length}

<?xml version="1.0" encoding="UTF-8"?>
<soap12:Envelope
	xmlns:soap12="http://www.w3.org/2003/05/soap-envelope"
	xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
	xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
	xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
	xmlns:wsa="http://www.w3.org/2005/08/addressing"
	xmlns:wssc="http://schemas.xmlsoap.org/ws/2005/02/sc"
	xmlns:wst="http://schemas.xmlsoap.org/ws/2005/02/trust"
>
	<soap12:Header>
		<wsa:Action soap12:mustUnderstand="1">http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue</wsa:Action>
		<wsa:To soap12:mustUnderstand="1">HTTPS://login.live.com:443//RST2.srf</wsa:To>
		<wsa:MessageID>1794660111</wsa:MessageID>
		<ps:AuthInfo xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" Id="PPAuthInfo">
			<ps:HostingApp>{2D1560CA-6193-4626-BF7D-04BECA7B89BD}</ps:HostingApp>
			<ps:BinaryVersion>5</ps:BinaryVersion>
			<ps:UIVersion>1</ps:UIVersion>
			<ps:Cookies></ps:Cookies>
			<ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMx</ps:RequestParams>
		</ps:AuthInfo>
		<wsse:Security>
			<wsse:UsernameToken Id="user">
				<wsse:Username>{user-handle}</wsse:Username>
				<wsse:Password>{password}</wsse:Password>
			</wsse:UsernameToken>
			<wsu:Timestamp Id="Timestamp">
				<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
				<wsu:Expires>2026-11-14T13:21:03Z</wsu:Expires>
			</wsu:Timestamp>
		</wsse:Security>
	</soap12:Header>
	<soap12:Body>
		<ps:RequestMultipleSecurityTokens xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" Id="RSTS">
			<wst:RequestSecurityToken Id="RST0">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>http://Passport.NET/tb</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST1">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>messengerclear.live.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="MBI_KEY_OLD"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST2">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>messenger.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="?id=507"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST3">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>contacts.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="MBI"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST4">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>messengersecure.live.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST5">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>spaces.live.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="MBI"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
			<wst:RequestSecurityToken Id="RST6">
				<wst:RequestType>http://schemas.xmlsoap.org/ws/2005/02/trust/Issue</wst:RequestType>
				<wsp:AppliesTo>
					<wsa:EndpointReference>
						<wsa:Address>storage.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wsp:PolicyReference URI="MBI"></wsp:PolicyReference>
			</wst:RequestSecurityToken>
		</ps:RequestMultipleSecurityTokens>
	</soap12:Body>
</soap12:Envelope>

# Server/Response

HTTP/1.1 200 OK
Content-Type: application/soap+xml
Content-Length: 11157

<?xml version="1.0" encoding="utf-8" ?>
<S:Envelope
	xmlns:S="http://www.w3.org/2003/05/soap-envelope"
	xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
	xmlns:wsa="http://www.w3.org/2005/08/addressing"
>
	<S:Header>
		<wsa:Action
			xmlns:S="http://www.w3.org/2003/05/soap-envelope"
			xmlns:wsa="http://www.w3.org/2005/08/addressing"
			xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
			wsu:Id="Action"
			S:mustUnderstand="1"
		>http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue</wsa:Action>
		<wsa:To
			xmlns:S="http://www.w3.org/2003/05/soap-envelope"
			xmlns:wsa="http://www.w3.org/2005/08/addressing"
			xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
			wsu:Id="To"
			S:mustUnderstand="1"
		>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To>
		<wsse:Security S:mustUnderstand="1">
			<wsu:Timestamp
				xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
				wsu:Id="TS"
			>
				<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
				<wsu:Expires>2026-11-14T13:21:03Z</wsu:Expires>
			</wsu:Timestamp>
		</wsse:Security>
		<psf:pp xmlns:psf="http://schemas.microsoft.com/Passport/SoapServices/SOAPFault">
			<psf:serverVersion>1</psf:serverVersion>
			<psf:PUID>0000000100000002</psf:PUID>
			<psf:configVersion>3.0.869.0</psf:configVersion>
			<psf:uiVersion>3.0.869.0</psf:uiVersion>
			<psf:mobileConfigVersion>3.0.869.0</psf:uiVersion>
			<psf:appDataVersion>1</psf:uiVersion>
			<psf:authstate>0x48803</psf:authstate>
			<psf:reqstatus>0x0</psf:reqstatus>
			<psf:serverInfo
				LocVersion="0"
				ServerTime="2026-11-14T13:16:03Z"
				BuildVersion="2024.11.22.14.45.20"
			>yellows111 2024.11.22.14.45.20</psf:serverInfo>
			<psf:cookies/>
			<psf:browserCookies/>
			<psf:credProperties>
				<psf:credProperty Name="CID">0000000100000002</psf:credProperty>
			</psf:credProperties>
			<psf:extProperties>
				<psf:extProperty Name="CID">0000000100000002</psf:credProperty>
			</psf:extProperties>
			<psf:response/>
		</psf:pp>
	</S:Header>
	<S:Body>
		<wst:RequestSecurityTokenResponseCollection
			xmlns:S="http://www.w3.org/2003/05/soap-envelope"
			xmlns:wst="http://schemas.xmlsoap.org/ws/2005/02/trust"
			xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
			xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
			xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
			xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
			xmlns:psf="http://schemas.microsoft.com/Passport/SoapServices/SOAPFault"
		>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:legacy</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>http://Passport.NET/tb</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<EncryptedData
						xmlns="http://www.w3.org/2001/04/xmlenc#"
						Id="BinaryDAToken0"
						Type="http://www.w3.org/2001/04/xmlenc#Element"
					>
						<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod>
						<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
							<ds:KeyName>http://Passport.NET/STS</ds:KeyName>
						</ds:KeyInfo>
						<CipherData>
							<CipherValue>[[removed intentionally]]</CipherValue>
						</CipherData>
					</EncryptedData>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
				<wst:RequestedProofToken>
					<wst:BinarySecret>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA</wst:BinarySecret>
				</wst:RequestedProofToken>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>messengerclear.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact1">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
				<wst:RequestedProofToken>
					<wst:BinarySecret>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA</wst:BinarySecret>
				</wst:RequestedProofToken>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>messenger.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact2">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>contacts.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact3">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>messengersecure.live.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact4">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>spaces.live.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact5">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
			</wst:RequestSecurityTokenResponse>
			<wst:RequestSecurityTokenResponse>
				<wst:TokenType>urn:passport:compact</wst:TokenType>
				<wsp:AppliesTo xmlns:wsa="http://www.w3.org/2005/08/addressing">
					<wsa:EndpointReference>
						<wsa:Address>storage.msn.com</wsa:Address>
					</wsa:EndpointReference>
				</wsp:AppliesTo>
				<wst:Lifetime>
					<wsu:Created>2026-11-14T13:16:03Z</wsu:Created>
					<wsu:Expires>2026-11-15T13:16:03Z</wsu:Expires>
				</wst:Lifetime>
				<wst:RequestedSecurityToken>
					<wsse:BinarySecurityToken Id="Compact6">t=token&amp;p=</wsse:BinarySecurityToken>
				</wst:RequestedSecurityToken>
				<wst:RequestedAttachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedAttachedReference>
				<wst:RequestedUnattachedReference>
					<wsse:SecurityTokenReference>
						<wsse:Reference URI="AAAAAAAAAAAAAAAAAAAAAAAAAAA="></wsse:Reference>
					</wsse:SecurityTokenReference>
				</wst:RequestedUnattachedReference>
			</wst:RequestSecurityTokenResponse>
		</wst:RequestSecurityTokenResponseCollection>
	</S:Body>
</S:Envelope>