edocs Home > Oracle WebLogic Server Documentation > Administration Console Online Help > Domains: Web Service Security: Token Handler: Configuration

Domains: Web Service Security: Token Handler: Configuration

Configuration Options     Related Tasks     Related Topics

Use this page to configure a token handler associated with a Web Service security configuration. In particular, you can change the classname that implements the token handler, change the type of token, and add or delete properties of the token handler.

A common reason for creating a token handler for a Web Service security configuration is to specify that a client invoking a message-secured Web Service uses an X.509 certificate to establish their identity.

Configuration Options

Name	Description
Name of	Name of token handler. MBean Attribute: WebserviceTokenHandlerMBean.Name Changes take effect after you redeploy the module or restart the server.
Class Name	The fully qualified name of the class that implements a particular credential provider or token handler. MBean Attribute: WebserviceTokenHandlerMBean.ClassName
Token Type	Specifies the type of token used for the particular credential provider or token handler. WebLogic Server supports, by default, three types of tokens: X.509, UsernameToken, and SAML, as specified by the following WS-Security specifications: Web Services Security: Username Token Profile Web Services Security: X.509 Token Profile Web Services Security: SAML Token Profile To specify one of these out-of-the-box types, use these values respectively: "ut", "x509", or "saml". MBean Attribute: WebserviceTokenHandlerMBean.TokenType
Handling Order	Specifies the order in which the token handlers execute on a given token. If you do not specify an order, it is determined by the order in which you added the token handlers. MBean Attribute: WebserviceTokenHandlerMBean.HandlingOrder
Name of	The user-specified name of this MBean instance. This name is included as one of the key properties in the MBean's javax.management.ObjectName: Name of=user-specified-name MBean Attribute: ConfigurationPropertyMBean.Name Changes take effect after you redeploy the module or restart the server.
Value	Specifies the value of the property. If the property is encrypted, then attribute is null and one should use the EncryptedValue attribute to get the decrypted value. MBean Attribute: ConfigurationPropertyMBean.Value
Is Encrypted	MBean Attribute: ConfigurationPropertyMBean.isEncryptValueRequired Changes take effect after you redeploy the module or restart the server.

Related Tasks

• Create a Web Service security configuration

• Specify the key pair used to sign SOAP messages

• Specify the key pair used to encrypt SOAP messages

• Use a password digest in SOAP messages

• Use X.509 certificates to establish identity

Related Topics

• WebLogic Web Services: Security

• Security Topic Page