WAS v8.5 > Reference > Sets

WS-Security authentication and protection

Use the links on this page to configure authentication, protection, signature, and encryption information the policy requires.

We can configure authentication, protection, signature, and encryption information for tokens and message parts when editing a default cell or server binding. We can also configure application specific bindings for tokens and message parts required by the policy set.

To view this dmgr console page when editing a general provider policy set binding or general client policy set binding:

1. Click Services > Policy sets > General provider policy set bindings or Services > Policy sets > General client policy set bindings.

2. Click Provider sample or Client sample.

3. Click WS-Security in the Policies table.

4. Click the Authentication and protection link in the Main Message Security Policy Bindings section.

To view this dmgr console page when we are configuring application specific bindings for tokens and message parts required by the policy set:

1. Click Applications > Application Types > WebSphere enterprise applications.

2. Select an application containing JAX-WS web services. The application must contain a service provider or a service client.

3. Click the Service provider policy sets and bindings link or the Service client policy sets and bindings link in the Web Services Properties section.

4. Select a binding. You must have previously attached a policy set and assigned an application specific binding.

5. Click WS-Security in the Policies table.

6. Click the Authentication and protection link in the Main message security policy bindings section.

Depending on your assigned security role when security is enabled, you might not have access to text entry fields or buttons to create or edit configuration data. Review the administrative roles documentation to learn more about the valid roles for the application server.

This dmgr console page applies only to JAX-WS applications.

Subtopics

• WS-Security authentication and protection for general bindings
  Use the links on this page to configure authentication, protection, signature, and encryption information the policy requires when using general bindings.
• WS-Security authentication and protection for application specific bindings
  Use the links on this page to configure authentication, signature, and encryption information the policy requires when using application specific bindings.
• Protection token settings (generator or consumer)
  Use this page to configure protection tokens. Protection tokens sign messages to protect integrity or encrypt messages to provide confidentiality.
• Authentication generator or consumer token settings
  Authentication tokens are used to prove or assert an identity. Use the dmgr console to add authentication token settings for message parts when editing a general binding.
• Callback handler settings for JAX-WS
  Use this page to configure callback handler settings for JAX-WS, which determine how security tokens are acquired from messages headers.

Related

Define and managing policy set bindings
Manage policy sets

Reference:

Policy set bindings settings
WS-Security authentication and protection for general bindings
WS-Security authentication and protection for application specific bindings
Protection token settings (generator or consumer)
Authentication generator or consumer token settings
Signed or Encrypted message part settings
Callback handler settings for JAX-WS
Keys and certificates
Administrative roles

+

Search Tips   |   Advanced Search