
en.help.ref-messagesecurityconfigedit.html Maven / Gradle / Ivy
Edit Message Security Configuration
Use the Edit Message Security Configuration page to enable providers for message security.
To enable message security for web services endpoints deployed in Enterprise Server, you
must specify a provider to be used by default on the server
side. If you enable a default provider for message security, you also need
to enable providers to be used by clients of the web services deployed
in Enterprise Server. Information on enabling the providers used by clients is discussed
in To Enable Message Security for Application Clients.
To enable message security for web service invocations originating from deployed endpoints, you
must specify a default client provider. If you enabled a default client provider
for Enterprise Server, you must ensure that any services invoked from endpoints deployed
in Enterprise Server are compatibly configured for message layer security.
The Edit Message Security Configuration page contains the following options.
- Authentication Layer
The message layer at which authentication is performed. This is a read-only field. The value is either SOAP (for the default message security configuration) or HttpServlet.
- Default Provider
The default server-side provider, if any. The default server provider, also called the default provider, identifies the server provider invoked for an application that does not identify a specific server provider. Available choices are ServerProvider, XWS_ServerProvider, or none. By default, no provider is selected, so that Enterprise Server will not invoke a message security provider on the server side. Generally, select ServerProvider as the default provider.
- Default Client Provider
The default client provider, if any. The default client provider identifies the client provider invoked for an application that does not identify a specific client provider. Available choices are ClientProvider, XWS_ClientProvider, or none. By default, no provider is selected, so that Enterprise Server will not invoke a message security provider on the client side. Generally, select none for the default client provider. Select ClientProvider to enable a default provider and message protection policy to apply to the web services invocations originating from web services endpoints deployed on Enterprise Server.
Related Tasks
Related asadmin Commands
Use the set(1) command to modify a message security configuration.
To specify the default server provider:
asadmin set --user admin-user --port admin-port
server-config.security-service.message-security-config.SOAP.
default_provider=ServerProvider
To specify the default client provider:
asadmin set --user admin-user --port admin-port
server-config.security-service.message-security-config.SOAP.
default_client_provider=ClientProvider