Use this page to configure the caller settings. The caller specifies the token or message part that is used for authentication.
Specifies the name of the caller to use for authentication. Enter a caller name in this required field. This arbitrary name identifies this caller setting.
Default | String |
Specifies the local name of the caller to use for authentication. Enter a caller identity local name in this required field.
See the Caller identity namespace URI field description for a list of possible values
Default | String |
Specifies the uniform resource identifier (URI) of the caller to use for authentication. Enter a caller URI in this field.
Token type | Caller identity local part | Caller identity namespace URI |
---|---|---|
Username token 1.0 | http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken | |
Username token 1.1 | ![]() ![]() |
|
X509 certificate token | http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509 | |
X509 certificates in a PKIPath | http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1 | |
A list of X509 certificates and CRLs in a PKCS#7 | http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#PKCS7 | |
LTPA token | LTPA | http://www.ibm.com/websphere/appserver/tokentype/5.0.2 |
LTPA propagation token | LTPA_PROPAGATION | http://www.ibm.com/websphere/appserver/tokentype |
Specifies whether identity assertion is used when authenticating.
Select this check box if you want to use identity assertion. When you select this checkbox, the Trusted identity local name and Trusted identity namespace URI fields are enabled.
Default | Disabled |
Specifies the trusted identity local name when the identity assertion is used.
If you select the Use identity assertion option and a trust token exists in the WS-Security policy, you must provide a value for the Trusted identity local name field for the bindings to work properly.
Specifies the trusted identity uniform resource identifier (URI).
Specifies the class name of the callback handler. Enter the class name of the callback handler in this field.
If you provide a value for the Trusted identity local name field and you do not set the token consumer for the trust token to Trust any certificate, then you must set the value in this Callback handler field to com.ibm.ws.wssecurity.impl.auth.callback.TrustedIdentityCallbackHandler.
property name="trustedId_0", value="CN=Bob,O=ACME,C=US" property name="trustedId_1", value="user1"
Specifies the Java Authentication and Authorization Service (JAAS) application login. Select a callback handler from the menu or click New Application Login to create a new configuration.
Specifies the name of the custom property.
Custom properties are not initially displayed in this column. Select one of the following actions for custom properties:
Button | Resulting Action |
---|---|
New | Creates a new custom property entry. To add a custom property, enter the name and value. |
Edit | Specifies that you can edit the custom property value. At least one custom property must exist before this option is displayed. |
Delete | Removes the selected custom property. |
Specifies the value of the custom property that you want to use. Use the Value field to add, edit, or delete the value for a custom property.