Trusted ID evaluator collection

To view a list of trusted identity (ID) evaluators. The trusted ID evaluator determines whether to trust the identity-asserting authority. After the ID is trusted, the appserver issues the proper credentials based on the identity, which are used in a downstream call for invoking resources. The trusted ID evaluator implements the com.ibm.wsspi.wssecurity.id.TrustedIDEvaluator interface.

This admin console panel applies only to Java™ API for XML-based RPC (JAX-RPC) applications.

To view this admin console page for trusted ID evaluators on the cell level...

1. Click Security > JAX-WS and JAX-RPC security runtime.

2. Under Additional properties, click Trusted ID evaluators.

3. Click New to create a trusted ID evaluator or click Delete to delete a trusted ID evaluator.

To view this admin console page for trusted ID evaluators on the server level...

1. Click Servers > Server Types > WebSphere application servers > server_name.

2. Under Security, click JAX-WS and JAX-RPC security runtime.

   In a mixed node cell with a server using Websphere Application Server version 6.1 or earlier, click Web services: Default bindings for WS-Security

3. Under Additional properties, click Trusted ID evaluators.

4. Click New to create a trusted ID evaluator or click Delete to a delete a trusted ID evaluator.

To view this admin console page for trusted ID evaluators on the application level...

1. Click Applications > Application Types > WebSphere enterprise apps > application_name.

2. Under Modules, click Manage Modules > URI_name.

3. Under Web Service Security Properties, click Web services: WAS security bindings.

4. Under Request receiver binding, click Edit.

5. Click Trusted ID evaluators.

6. Click New to create a trusted ID evaluator or click Delete to delete a trusted ID evaluator.

Trusted ID evaluators are only required for the request receiver (Version 5.x applications) and the request consumer (Version 6.0.x applications), if identity assertion is configured.

Using this trusted ID evaluator collection panel...

1. Specify a trusted ID evaluator name and a trusted ID evaluator class name.

2. Save the changes by clicking Save in the messages section at the top of the admin console.

3. Click Update run time to update the WS-Security run time with the default binding information, which is found in the ws_security.xml file. The configuration changes made to the other Web services also are updated in the WS-Security run time.

Trusted ID evaluator name

Unique name of the trusted ID evaluator.

Trusted ID evaluator class name

Class name of the trusted ID evaluator.

---

 

Related tasks

Set trusted ID evaluators on the server or cell level

 

Related

Trusted ID evaluator settings