WS-Security authentication and protection for general bindings
Use the links on this page to configure authentication, signature, and encryption information that the policy requires when using general bindings.
Configure authentication, signature, and encryption information for tokens and message parts when we are editing a general binding.
To view this admin console page when we are editing a general binding at the cell level...
- Click Services > Policy sets > General provider policy set bindings or General client.policy set bindings.
- Click on the name of the bindings you want to edit.
- Click WS-Security policy in the Policies table.
- Click the Authentication and protection link in the Main message security policy bindings section.
This admin console panel applies only to Java™ API for XML Web Services (JAX-WS) applications.
- Disable implicit protection for signature confirmation
Whether implicit protection of the SignatureConfirmation element is enabled or disabled.
The explicitlyProtectSignatureConfirmation attribute in the Web services security binding is provided to disable implicit signature and encryption of the SignatureConfirmation element on the response message. If this checkbox is selected, the attribute is added and implicit protection is disabled. This provides interoperability with earlier versions of WAS.
Default: Not selected (implicit protection is enabled)
- Protection tokens – Protection token name
List of protection tokens that can be configured in the Protection tokens table.
The following actions are available for general bindings:
Button Resulting Action New Token Creates a new protection token type. Delete Removes the selected protection token type.
- Protection tokens – Usage
Policy assertion usage names that we can customize in the Protection tokens table.
For the usage field, the following options are available for the general bindings:
- Asymmetric encryption generator
- Asymmetric encryption consumer
- Asymmetric signature generator
- Asymmetric signature consumer
- Symmetric encryption generator
- Symmetric encryption consumer
- Symmetric signature generator
- Symmetric signature consumer
- Authentication tokens – Authentication token name
List of authentication tokens that we can customize in the Authentication tokens table when using general bindings.
If working with a Username token or LTPA token that is using general bindings, the user names and passwords might have been provided as examples. When you click a Username token or LTPA token link, we need to update the values for these token types using the Callback handler link found on the Authentication token settings page.
The following actions are available for general bindings:
Button Resulting Action New Token Creates a new authentication token type. Delete Removes the selected authentication token type.
- Authentication tokens – Usage
Usage names for the Authentication tokens table for general bindings.
The following options are available for general bindings:
- Inbound
- Outbound
- Request message signature and encryption protection – Name
Unique name to identify the request message part from the Request message signature and encryption protection table that is protected.
The following actions are available for general bindings. The Move up and Move down actions are available only when using service client policy sets and bindings.
Button Resulting Action New Signature Creates a new signature. New Encryption Creates a new encryption protection. Delete Removes the selected request message part. Move up Moves the selected request message part up in the order. Move down Moves the selected request message part down in the order.
- Request message signature and encryption protection – Protection
Type of protection from the Request message signature and encryption protection table. This field displays the type of protection enabled for the general binding.
- Response message signature and encryption protection – Name
Unique name to identify the response message part from the Response message signature and encryption protection table that is protected.
The following actions are available for general bindings. The Move up and Move down actions are available only when using service provider policy sets and bindings.
Button Resulting Action New Signature Creates a new response message signature. New Encryption Creates a new encryption. Delete Removes the selected response message part. Move up Moves the selected response message part up in the order. Move down Moves the selected response message part down in the order.
- Response message signature and encryption protection – Protection
Type of protection enabled from the Response message signature and encryption protection table. This field displays the type of protection enabled for the response message part.
- Response message signature and encryption protection – Order
Order in which the signatures and encryptions occur. Use the Move up and Move down actions to order the list of protection types in this table.
Related tasks
Set policy set bindings
Manage policy sets
Related
Protection token settings (generator or consumer)
Authentication generator or consumer token settings
WS-Security authentication and protection for application specific bindings
Signed or Encrypted message part settings
Callback handler settings
Policy set bindings settings
Keys and certificates
WS-Security authentication and protection