Disable X.509 certificate validation when using SAML holder_of

Before you begin

You must first create the Web Service security configuration that is associated with a Web Service before you can configure specific features.

See Create a Web Service security configuration for details about creating a security configuration.

By default, the WebLogic Web Services runtime always validates the X.509 certificate specified in any associated security policy file. To disable this validation when using SAML holder_of_key assertions, configure the Web Service security configuration associated with the Web service by setting a property on the SAML token handler, as described in the following procedure.


If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit (see Use the Change Center).
      

        In the left
        pane of the Administration Console, select the name of your domain.
        This is the top-level node of the navigation tree.
      

      

        In the right pane, select Web Service Security.
      

      

        In the table, click the name of the Web Service security
        configuration you want to update.

         
          
Web Services programmers associate a Web Service security
          configuration using the @WssConfiguration JWS
          annotation; the value attribute specifies the
          associated configuration name. If the programmer does not specify
          the value attribute, the Web Service is associated
          with the default security configuration:
          default_wss.
        
      

      

        Select Token Handler.
      

      

        Click New.
      

      

        Enter the following values in the required fields:

        
          
Name of: Enter the following example value:
          default_saml_handler.

          
Class Name: Enter the following exact value:
          weblogic.wsee.security.saml.SAMLTokenHandler.

          
Token Type: Enter the following exact value:
          saml.

          
Handling Order: Enter an integer to specify the order
          in which this token handler is handled. You can, if you want, leave
          the default value of 0.
        

      

      

        Click Next.
      

      

        In the Create a Web Services Security Token Handler
        window, check the Add Properties checkbox.
      

      

        Click Finish.
      

      

        At the bottom of the Setting for default_saml_handler
        page, in the Token Handler Properties table, click
        New.
      

      

        Enter the following values in the fields:

        
          
Name of: Enter the following exact value:
          EnableHolderOfKeyValidation.

          
Value: Enter the following exact value:
          false.
        


         
          
Leave the Is Encrypted check box unchecked.
        
      

      

        Click OK.
      

      

        Click Save.
      
    
To activate these changes, in the Change Center of the Administration Console, click Activate Changes. 

Not all changes take effect immediately—some require a restart (see Use the Change Center).





        After you finish
      
      
You must redeploy any Web Service which is associated with this
      security configuration for the security changes to take effect.
    
  





                    }


                    }


                    (document.images){ dcs_imgarray[dcs_ptr] = new
                    Image; dcs_imgarray[dcs_ptr].src = dcs_src;

                    WT[myMeta.name.substring(3)]=myMeta.content; } if
                    DCSext[myMeta.name.substring(7)]=myMeta.content; } }
                    } }

                    for (N in DCS){P+=A( N, DCS[N]);} for (N in
                    WT){P+=A( "WT."+N, WT[N]);} for (N in DCSext){P+=A(
                    N, DCSext[N]);}

                    //}





                    aCrumb=aCookie[i].split("="); if (crumb==aCrumb[0]){
                    return aCrumb[1]; } } return null; }

                    i=0;i

Disable X.509 certificate validation when using SAML holder_of_key assertions