The message-security-binding element is used to bind a web service endpoint or port to a specific security provider.
The syntax for this element is as follows:
<!ELEMENT message-security-binding (message-security*)> <!ATLIST message-security-binding auth-layer %message-layer;#REQUIRED provider-id CDATA #IMPLIED >Table 8–3 message-security-binding Element
| Element name | Occurrences | Description | Type | 
| message-security | 0 or more | Specifies the message security requirements of request and response for the endpoint or port | See Table 8–5 | 
Table 8–4 Attributes of the message-security-binding Element
| Attribute name | Description | Type | Default | 
| auth-layer | Layer at which the security should be enforced | Entity message-layer | This attribute is required. | 
| provider-id | Identifies the provider-config that should be used | CDATA | If a value is not specified, then the default provider is used. If no default provider exists at the layer, the authentication requirements defined in the message-security-binding are not enforced. |