to enable applications to construct trusted SOAP message exchanges

to synchronize Identities across security domains

to exchange tokens in order to overcome differences in supported technology between service consumers and service providers

to exchange tokens in order to map identities supplied by service consumers with identities supported by service providers