Use the New Message Security Configuration page to create an HttpServlet configuration for message security.
The New Message Security Configuration page contains the following options.
Specifies the message layer at which authentication is performed. The value must be SOAP or HttpServlet. Because a SOAP configuration is available by default, the only choice is HttpServlet.
The unique identifier of the provider configuration for this message security configuration.
If this option is selected, this provider is the default provider. The default provider will be invoked for any application that does not identify a specific provider. Whether the provider is the default client provider, the default server provider, or both is determined by the Provider Type.
Specifies the type of the provider. Available choices are:
Specifies that the provider is the client authentication provider.
Specifies that the provider is the server authentication provider.
Specifies that the provider is both a client and a server authentication provider.
The name of the Java implementation class of the provider. Client authentication providers must implement the com.sun.enterprise.security.jauth.ClientAuthModule interface. Server-side providers must implement the com.sun.enterprise.security.jauth.ServerAuthModule interface. Client-server providers must implement both interfaces.
Additional properties for the message security configuration.
None.