Use the Edit Message Security Configuration page to enable providers for message security.
To enable message security for web services endpoints deployed in GlassFish Server, you must specify a provider to be used by default on the server side. If you enable a default provider for message security, you also need to enable providers to be used by clients of the web services deployed in GlassFish Server. Information on enabling the providers used by clients is discussed in To Enable Message Security for Application Clients.
To enable message security for web service invocations originating from deployed endpoints, you must specify a default client provider. If you enabled a default client provider for GlassFish Server, you must ensure that any services invoked from endpoints deployed in GlassFish Server are compatibly configured for message layer security.
The Edit Message Security Configuration page contains the following options.
The name of the configuration to which the settings on this page apply. This field is read only.
The message layer at which authentication is performed. This is a read-only field. The value is either SOAP (for the default message security configuration) or HttpServlet.
The default server-side provider, if any. The default server provider, also called the default provider, identifies the server provider invoked for an application that does not identify a specific server provider. Available choices are ServerProvider, XWS_ServerProvider, or none. By default, no provider is selected, so that GlassFish Server will not invoke a message security provider on the server side. Generally, select ServerProvider as the default provider.
The default client provider, if any. The default client provider identifies the client provider invoked for an application that does not identify a specific client provider. Available choices are ClientProvider, XWS_ClientProvider, or none. By default, no provider is selected, so that GlassFish Server will not invoke a message security provider on the client side. Generally, select none for the default client provider. Select ClientProvider to enable a default provider and message protection policy to apply to the web services invocations originating from web services endpoints deployed on GlassFish Server.
Use the set(1) command to modify a message security configuration.
To specify the default server provider:
asadmin set --user admin-user --port admin-port server-config.security-service.message-security-config.SOAP. default_provider=ServerProvider
To specify the default client provider:
asadmin set --user admin-user --port admin-port server-config.security-service.message-security-config.SOAP. default_client_provider=ClientProvider