en.help.task-messagesecurityconfignew.html Maven / Gradle / Ivy
To Create a Message Security Configuration
Normally, you do not need to create a message security configuration. GlassFish
Server includes a message security configuration for the SOAP authentication layer. The providers for
this configuration are not activated by default, but you can activate them by
editing the SOAP message security configuration. You can, however, create a configuration for
the HttpServlet authentication layer and specify one or more provider configurations for it.
- In the navigation tree, expand the Configuration node.
- Expand the Security node.
- Select the Message Security node.
The Message Security Configurations page opens.
- On the Message Security Configurations page, click New.
The New Message Security Configuration page opens.
Note - It is not possible to create or delete message security providers for the
default server-config configuration. The only message security providers that are supported for the
default server-config are SOAP and HttpServlet. Because these two message providers are already
created by default when GlassFish Server is installed, the New button is grayed
out on the Message Security Configurations page for the default server-config.
- On the New Message Security Configuration page, from the Authentication Layer drop-down list,
select the message layer for which you are creating a configuration.
Because a SOAP configuration is available by default, the only choice is HttpServlet.
- In the Provider ID field, type the unique identifier of the provider configuration
for this message security configuration.
- Select the Default Provider checkbox to specify that this provider configuration is the
default provider.
- From the Provider Type drop-down list, select the type of this provider.
Available choices are:
- client
Specifies that the provider is the client authentication provider.
- server
Specifies that the provider is the server authentication provider.
- client-server
Specifies that the provider is both a client and a server authentication provider.
- In the Class Name field, type the name of the Java implementation class
of the provider.
Client authentication providers must implement the com.sun.enterprise.security.jauth.ClientAuthModule interface. Server-side providers must implement the com.sun.enterprise.security.jauth.ServerAuthModule
interface. Client-server providers must implement both interfaces.
- (Optional) In the Additional Properties section, specify additional properties.
To add a property, click the Add Property button. In the blank row
that appears, type the property name in the Name field, and type the
property value in the Value field.
The GlassFish Server does not define any additional properties for message security configurations.
See Also
Copyright © 2010, Oracle and/or its affiliates. All rights reserved. Legal Notices