Web Services Security

Application Server supports SOAP message layer security based on the SAML token profile of WS-Security. Application Server also provides tamper-proof auditing for web services. For more information, see Auditing Authentication and Authorization Decisions and Audit Modules.

You can use default message security providers to provide web services security. Use the following commands to customize the message security providers:

• create-message-security-provider(1)

• delete-message-security-provider(1)

• list-message-security-providers(1)

For more information about configuring security for web services, see Chapter 9, Configuring Message Security