Message Parts [Settings]
Identifies a specific message part according to the specified dialect and keyword.
To view this page in the console, click one of the following paths:
- Service integration -> Web services -> WS-Security configurations -> v1-inbound-config_name -> [Request consumer] Required integrity -> required-integrity_name -> [Additional Properties] Message parts -> message_part_name
- Service integration -> Web services -> WS-Security configurations -> v1-outbound-config_name -> [Response consumer] Required integrity -> integrity_name -> [Additional Properties] Message parts -> message_part_name
- Service integration -> Web services -> WS-Security configurations -> v1-inbound-config_name -> [Request consumer] Required Confidentiality -> required-confidentiality_name -> [Additional Properties] Message parts -> message_part_name
- Service integration -> Web services -> WS-Security configurations -> v1-outbound-config_name -> [Response consumer] Required Confidentiality -> confidentiality_name -> [Additional Properties] Message parts -> message_part_name
Configuration tab
The Configuration tab shows configuration properties for this object. These property values are preserved even if the runtime environment is stopped then restarted.
General Properties
Name
The name of the message part definition.
Information Value Required Yes Data type String
Dialect
The expression dialect to use.
Information Value Required Yes Data type drop-down list
Keyword
Identifies the message part in a way defined by the chosen dialect.
When the http://www.ibm.com/websphere/webservices/wssecurity/dialect-was dialect value is selected, the following are valid keyword values:
Required Integrity
- action
- The wsa:Action element.
- body
- The SOAP body element.
- dsigkey
- Key information element, which is used for digital signature.
- enckey
- Ds:KeyInfo element, which is used for encryption.
- messageid
- The wsa:MessageID element.
- relatesto
- The wsa:RelatesTo element.
- securitytoken
- Specifies any security token elements, for example the wsse:BinarySecurityToken element.
- timestamp
- The wsu:Timestamp element. This element determines whether the message is valid based upon the time that the message is sent and then received.
- to
- The wsa:To element.
- wsaall
- Specifies all of the WS-Addressing elements in the SOAP header.
- wsafaultto
- The wsa:FaultTo WS-Addressing element in the SOAP header.
- wsafrom
- Specifies the wsa:From WS-Addressing element in the SOAP header.
- wsareplyto
- Specifies the wsa:ReplyTo WS-Addressing element in the SOAP header.
- wscontext
- Specifies the WS-Context header for the SOAP header. See Propagating work area context over Web services.
Required Confidentiality
- bodycontent
- The SOAP body
- digestvalue
- Ds:DigestValue element within the ds:Signature element
- signature
- Specifies an entire signature. We can encrypt the signature element, ds:Signature, by selecting this message part.
If the value of a ds:DigestValue element in a signature needs to be encrypted, the entire parent ds:Signature element must be encrypted. Use the signature keyword to perform the encryption.
- usernametoken
- Specifies the wsse:UsernameToken element
When the http://www.w3.org/TR/1999/REC-xpath-1999116 dialect value is selected, then the keyword value can be any valid XPath expression that points to a part of the message. For example:
/*[namespace-uri()='http://schemas.xmlsoap.org/soap/envelope/' and local-name()='Envelope'] /*[namespace-uri()='http://schemas.xmlsoap.org/soap/envelope/' and local-name()='Body']Do not use this transform algorithm if we want your configured application to be compliant with the Basic Security Profile (BSP). Instead use http://www.w3.org/2002/06/xmldsig-filter2 to ensure compliance.
Information Value Required Yes Data type String