Use this information to configure trust identity (ID) evaluators.
To view this administrative console page for trusted ID
evaluators on the cell level, complete the following steps:
- Click Security > Web services.
- Under Additional properties, click Trusted ID evaluators.
- Click New to create a trusted ID evaluator or click the name of
an existing configuration to modify its settings.
To view this administrative console page for trusted ID evaluators on the
server level, complete the following steps:
- Click Servers > Application servers > server_name.
- Under Security, click Web services: Default bindings for Web services
security.
- Under Additional properties, click Trusted ID evaluators.
- Click New to create a trusted ID evaluator or click the name of
an existing configuration to modify the settings.
![[Version 6 only]](../../v6plusapp.gif)
To view this administrative console page for trusted ID
evaluators on the application level, complete the following steps:
- Click Applications > Enterprise applications > application_name.
- Click Manage modules.
- Click the URI_name.
- Under Web Services Security Properties, click Web
services: Server security bindings.
- Under Request consumer (receiver) binding, click Edit custom.
- Click Trusted ID evaluators.
- Click New to create a trusted ID evaluator or click Delete to
delete a trusted ID evaluator.
![[Version 5 only]](../../v5app.gif)
To view this administrative console page for trusted ID
evaluators on the application level, complete the following steps:
- Click Applications > Enterprise applications > application_name.
- Under Related items, click EJB modules or Web modules > URI_name.
- Under Additional properties, click Web services: Server security bindings.
- Click Edit under Request receiver binding.
- Click Trusted ID evaluators.
- Click New to create a trusted ID evaluator or click Delete to
delete a trusted ID evaluator.
Important: Trusted ID evaluators
are only required for the request receiver (Version 5.x applications) and
the request consumer (Version 6.x applications), if identity assertion is
configured.
You can specify one of the following options:
- None
- Choose this option if you are not specifying a trusted ID evaluator.
- Existing evaluator definition
- Choose this option to specify a currently defined trusted ID evaluator.
- Binding evaluator definition
- Choose this option to specify a new trusted ID evaluator. A description
of the required fields follows.
Specifies the class name of the trusted ID evaluator.
The specified trusted ID evaluator class name must implement the com.ibm.wsspi.wssecurity.id.TrustedIDEvaluator
interface. The default TrustedIDEvaluator class is com.ibm.wsspi.wssecurity.id.TrustedIDEvaluatorImpl.
When you use this default TrustedIDEvaluator class, you must specify the name
and the value properties for the default trusted ID evaluator to create the
trusted ID list for evaluation.
To specify the name and value properties, complete the following steps:
- Under Additional properties, click Properties > New.
- Specify the trusted ID evaluator name as a property name. You must specify
the trusted ID evaluator name in the form, trustedId_n, where _n is
an integer from zero (0) to n.
- Specify the trusted ID as a property value.
For example:
property name="trustedId_0", value="CN=Bob,O=ACME,C=US"
property name="trustedId_1", value="user1"
If a distinguished
name (DN) is used, the space is removed for comparison.
Default |
com.ibm.wsspi.wssecurity.id.TrustedIDEvaluatorImpl |
See the programming model information in the documentation for an explanation
of how to implement the com.ibm.wsspi.wssecurity.id.TrustedIDEvaluator interface.