Trusted ID evaluator configuration settings

Use this information to configure trust identity (ID) evaluators.

To view this WebSphere® Application Server administrative console page for trusted ID evaluators on the server level, complete the following steps:

  1. Click Servers > Application servers > server_name.

  2. Under Security, click Web services: Default bindings for Web services security.

  3. Under Additional properties, click Trusted ID evaluators.

  4. Click New to create a trusted ID evaluator or click the name of an existing configuration to modify the settings.

To view this WAS administrative console page for trusted ID evaluators on the application level, complete the following steps:

  1. Click Applications > Enterprise applications > application_name.

  2. Under Related items, click EJB modules or Web modules.

  3. Click the URI_name.

  4. Under Additional properties, click Web services: Server security bindings.

  5. Under Request consumer (receiver) binding, click Edit custom.

  6. Click Trusted ID evaluators.

  7. Click New to create a trusted ID evaluator or click Delete to delete a trusted ID evaluator.

Important: Trusted ID evaluators are only required for the request receiver (Version 5.x applications) and the request consumer (Version 6.x applications), if identity assertion is configured.

You can specify one of the following options:

None

Choose this option if you are not specifying a trusted ID evaluator.

Existing evaluator definition

Choose this option to specify a currently defined trusted ID evaluator.

Binding evaluator definition

Choose this option to specify a new trusted ID evaluator. A description of the required fields follows.

 

Related reference

Trusted ID evaluator collection

 

Trusted ID evaluator name

Specifies the name that is used by the application binding to refer to a trusted identity (ID) evaluator that is defined in the default binding.

 

Trusted ID evaluator class name

Specifies the class name of the trusted ID evaluator.

The specified trusted ID evaluator class name must implement the com.ibm.wsspi.wssecurity.id.TrustedIDEvaluator interface. The default TrustedIDEvaluator class is com.ibm.wsspi.wssecurity.id.TrustedIDEvaluatorImpl. When you use this default TrustedIDEvaluator class, specify the name and the value properties for the default trusted ID evaluator to create the trusted ID list for evaluation.

To specify the name and value properties, complete the following steps:

  1. Under Additional properties, click Properties > New.

  2. Specify the trusted ID evaluator name as a property name. You must specify the trusted ID evaluator name in the form, trustedId_n, where _n is an integer from zero (0) to n.

  3. Specify the trusted ID as a property value.

For example:

property name="trustedId_0", value="CN=Bob,O=ACME,C=US"
property name="trustedId_1", value="user1" If a distinguished name (DN) is used, the space is removed for comparison.

Default com.ibm.wsspi.wssecurity.id.TrustedIDEvaluatorImpl

See the programming model information in the documentation for an explanation of how to implement the com.ibm.wsspi.wssecurity.id.TrustedIDEvaluator interface.