Policies applied settings
Use this pane to view and change whether the policy configuration of a WAS service client is configured dynamically, based on the policies supported by its service provider. We can set how the client obtains the policy of the service provider; the client can use an HTTP Get request or a Web Services Metadata Exchange (WS-MetadataExchange) request. We can specify a policy set and binding to provide message-level security for WS-MetadataExchange.
To view this admin console page for an application or service... The application must be a Web services service client.
- Click Applications > Application Types > WebSphere enterprise apps > service_client_application_name > [Web Services Properties] Service client.policy sets and bindings .
- Select the link in the Policies Applied column for the application or service you require.
To view this admin console page for a service...
- Click Services > Service clients > service_name.
- Select the link in the Policies Applied column for the service. The link is available if the service or the parent application has a policy set attached.
Depending on the assigned security role when security is enabled, we might not have access to text entry fields or buttons to create or edit configuration data. Review the administrative roles documentation to learn more about the valid roles for the appserver.
- Apply the following policies
Whether the client.policy is based on the policy of the service provider, and how that policy is used.
Select from the following options:
- Client policy only. Set the client based solely on the client.policy set. Do not use the policy of the service provider. This option is available when a client.policy set is attached to the resource.
- Client and provider policy. Set the client based on both the client policy set and the policy of the service provider. This option is available when a client.policy set is attached to the resource.
- Inherit application attachment. Inherit the setting of the parent application. This option is available for a service when a client.policy set is not attached to the service. If there is a policy set attached to the parent application, the inherited properties are displayed on this pane, but we cannot change them. If there is no policy set attached to the parent application, when you return to the Service clients policy sets and bindings pane, the Policies applied column shows a value of None.
- Provider policy only. Set the client based solely on the policy of the service provider. This option is available when a client.policy set is not attached to the resource.
- HTTP GET request
Click HTTP GET request to obtain the policy of the service provider by using an HTTP Get request. The policy configuration must be in WS-PolicyAttachments format in the WSDL of the service provider.
This option is available when Apply the following policies is set to Client and provider policy or Provider policy only.
By default, the HTTP Get request is targeted at the URL for each service endpoint followed by ?WSDL.
- Use the default request target
When you apply a policy to a service, click Use the default request target to target the HTTP Get request at the URL for each service endpoint followed by ?WSDL.
This option is available when HTTP GET request is selected and you apply a policy to a service.
When you apply a policy to an application, this option is not available.
- Specify request target
When you apply a policy to a service, click Specify request target to change the target for acquiring provider policy using an HTTP Get request. Enter the URL for the location of the provider policy in the field.
This option is available when HTTP GET request is selected and you apply a policy to a service.
When you apply a policy to an application, this option is not available.
- WS-MetadataExchange request
Click WS-MetadataExchange to obtain the policy of the service provider by using a WS-MetadataExchange GetMetadata request. The policy configuration must be in WS-PolicyAttachments format in the WSDL of the service provider.
This option is available when Apply the following policies is set to Client and provider policy or Provider policy only.
- Attach a system policy set to the WS-MetadataExchange
Select Attach a system policy set to the WS-MetadataExchange to set message-level security for the WS-MetadataExchange request. By default, this option is not selected and the transport policy of the application is used. This option is available when WS-MetadataExchange is selected.
When Attach a system policy set to the WS-MetadataExchange is selected, the Policy set and Binding lists are available. If we select Attach a system policy set to the WS-MetadataExchange, also select a policy set and a binding.
- Policy set
Select the policy set you require from the list to provide message-level security for the WS-MetadataExchange request. We can select from system policy sets that contain only WS-Security policies, only WS-Addressing policies, or both. The default policy set is SystemWSSecurityDefault.
System policy sets are used for system messages that are not business-related, for example, messages that apply qualities of service (QoS), including the messages defined in the WS-MetadataExchange protocol.
Note that any transport policy of the application is always used.
This option is available when Attach a system policy set to the WS-MetadataExchange is selected.
- Binding
Select the binding you require from the list to provide message level security for the WS-MetadataExchange request. We can select from general bindings that are scoped to the global domain or scoped to the security domain of this service.
This option is available when Attach a system policy set to the WS-MetadataExchange is selected.
Related concepts
Web service clients and policy configuration using the service provider policy
Related tasks
Set system policy sets
Set service client or provider bindings
Set the client.policy using a service provider policy
Related
Service client.policy set and bindings collection
Service client settings
Policy sharing settings
Administrative console buttons
Administrative console preference settings
Administrative roles