IVCred module properties
You can define Security Verify Access IVCred token module self or partner properties.
Appliance Property Self or Partner Mode Description ivcred.attribute.types SELF Issue Specifies the attribute type to include in the assertion. Enter one attribute type, or use an asterisk (*) for all types.
The default is an asterisk (*).
This property is required.
ivcred.sign.keystore.alias.db SELF Issue Name of the keystore for the signing key. For example, use DefaultKeyStore. This property is required if ivcred.add.signatures=true.
ivcred.sign.keystore.alias.cert SELF Issue Name of the signing key. For example, use testkey. This property is required if ivcred.add.signatures=true.
ivcred.add.signatures SELF Issue Specifies that signatures must be added to tokens. Set to true to add signatures to tokens.
Set to false to exclude signatures in tokens.
This property is optional.
ivcred.signing.
IncludeX509SubjectKeyIdentifierSELF Issue Include this attribute. Set to true to include the X509 Subject Key Identifier of the signing certificate.
Set to false to exclude the X509 Subject Key Identifier. This is the default.
Required if ivcred.add.signatures=true.
ivcred.signing.IncludePublicKey SELF Issue Include the KeyInfo element, Public Key. Set to true to include the Public Key.
Set to false to exclude the Public Key. This is the default.
Required if ivcred.add.signatures=true.
ivcred.signing.
IncludeX509IssuerDetailsSELF Issue Include the Key Info element, X509 Issuer Details. Set to true to include the X509 Issuer Details.
Set to false to exclude the X509 Issuer Details. This is the default.
Required if ivcred.add.signatures=true.
ivcred.IncludeX509SubjectName SELF Issue Include the Key Info element, X509 Subject Name. Set to true to include the X509 Subject Name.
Set to false to exclude the X509 Subject Name. This is the default.
Required if ivcred.add.signatures=true.
ivcred.IncludeX509CertificateData SELF Issue Include the Key Info element, X509 Certificate Data. Set to true to include the X509 Certificate Data.
Set to false to exclude the X509 Certificate Data. This is the default.
Required if ivcred.add.signatures=true.
ivcred.validate.keystore.alias.db PARTNER Validate Name of the keystore for the key identifier. For example, use DefaultKeyStore. Required if ivcred.verify.signatures=true.
ivcred.validate.keystore.alias.cert PARTNER Validate Name of the validation key identifier. For example, use testkey. Required if ivcred.verify.signatures=true.
ivcred.verify.signatures PARTNER Validate Specifies whether the signatures are verified. Set to true to verify signatures.
Set to false for no signature verification. The default is false.
This property is optional.
Parent topic: Token module properties