Normally, you do not need to create a message security configuration. GlassFish Server includes a message security configuration for the SOAP authentication layer. The providers for this configuration are not activated by default, but you can activate them by editing the SOAP message security configuration. You can, however, create a configuration for the HttpServlet authentication layer and specify one or more provider configurations for it.
The Message Security Configurations page opens.
The New Message Security Configuration page opens.
Note - It is not possible to create or delete message security providers for the default server-config configuration. The only message security providers that are supported for the default server-config are SOAP and HttpServlet. Because these two message providers are already created by default when GlassFish Server is installed, the New button is grayed out on the Message Security Configurations page for the default server-config.
Because a SOAP configuration is available by default, the only choice is HttpServlet.
Available choices are:
Specifies that the provider is the client authentication provider.
Specifies that the provider is the server authentication provider.
Specifies that the provider is both a client and a server authentication provider.
Client authentication providers must implement the com.sun.enterprise.security.jauth.ClientAuthModule interface. Server-side providers must implement the com.sun.enterprise.security.jauth.ServerAuthModule interface. Client-server providers must implement both interfaces.
To add a property, click the Add Property button. In the blank row that appears, type the property name in the Name field, and type the property value in the Value field.
The GlassFish Server does not define any additional properties for message security configurations.