Web Services Security - WS-Security / WSS - is a SOAP extension protocol for adding security to web services by adding security tokens, for example SAML), Kerberos, and X.509.
For more information see oasis documentation