# Extract WSS Header

## Contents
Overview Configuration

## Overview
The Extract WSS Header filter extracts a WS-Security `<Header>` block from a message. The extracted security header is stored in the `authentication.ws.wsblockinfo` message attribute. If you want to process this security header later in the circuit, you can specify this message attribute in the configuration screen for the specific processing filter. For example, if you want to sign the security header, you can specify the `authentication.ws.wsblockinfo` message attribute in the What to Sign section of the Sign Message filter. Open the Message Attribute tab on the What to Sign screen, and specify this attribute to sign the security header.
## Configuration
Configure the following fields on the Extract WSS Header filter configuration screen: Name: Enter an intuitive name for this filter (for example, Extract Current Actor WSS Header). Actor or Role: Specify the name of the SOAP Actor or Role of the WS-Security header that you want to extract. Remember, the WS-Security header is stored in the `authentication.ws.wsblockinfo` message attribute. Remove enclosing WS-Security element: This option removes the enclosing `<wsse:Security>` element from the message.