+

Search Tips   |   Advanced Search

Inbound WS-Security configuration [Settings]

WS-Security configuration for an inbound request. This defines WS-Security requirements for the request consumed from the client and the response generated. The objects created may be applied to one or more inbound ports.

To view this page in the console, click the following path:

  • Service integration -> Web services -> WS-Security configurations -> draft13-inbound-config_name.

    This panel is one of a set of panels that we can use to configure the service integration bus in accordance with the WS-Security Draft 13 specification (also known as the Web Services Security Core Specification). However, use of the WS-Security Draft 13 specification is deprecated, and you should only use it to allow continued use of an existing web services client application that has been written to the WS-Security Draft 13 specification.


    Configuration tab

    The Configuration tab shows configuration properties for this object. These property values are preserved even if the runtime environment is stopped then restarted. See the information center task descriptions for information about how to apply configuration changes to the runtime environment.


    General Properties

    WS-Security version

    Identifies the version of the WS-Security specification this configuration uses.

    Information Value
    Required No
    Data type String

    Service type

    The type of service the WS-Security configuration applies to.

    Information Value
    Required No
    Data type String

    Name

    The name of the inbound WS-Security configuration.

    This name must be unique across both WS-Security Version 1.0 and Draft 13 Inbound configurations, and it must obey the following syntax rules:

    • It must not start with "." (a period).

    • It must not start or end with a space.

    • It must not contain any of the following characters: \ / , # $ @ : ; " * ? < > | = + & % '

    Information Value
    Required Yes
    Data type String

    Actor URI

    WS-Security headers within the consumed request message will only be processed if they have the specified Actor URI.

    Information Value
    Required No
    Data type String


    Request receiver

    Required integrity

    Integrity constraints received messages must meet. Indicates which parts of the message must be digitally signed.

    Required confidentiality

    Confidentiality constraints applied to sent messages. Indicates which parts of the message will be encrypted.

    Login configuration

    Authentication methods this service supports. Custom authentication methods can also be defined.

    ID assertion

    Signature method and trust mode to use when ID Assertion is set as an authentication method.

    Add received time stamp

    Whether a time stamp will be added to any received message.

    Properties

    General properties for the inbound WS-Security configuration.


    Response sender

    Actor

    Defines the Actor URI to be included in the WS-Security headers of a generated message.

    Integrity

    Integrity constraints applied to sent messages. Indicates which parts of the message will be digitally signed.

    Confidentiality

    Confidentiality constraints applied to sent messages. Indicates which parts of the message will be encrypted.

    Add created time stamp

    Whether a time stamp will be added to any sent message. The time stamp may also contain an expires value.

    Properties

    General properties for the inbound WS-Security configuration.


    Related information:

  • Administrative console buttons

  • Administrative console preference settings Reference topic