auth-layer

none 

Specifies the message layer at which authentication is performed. The value must be SOAP.

provider-id

none 

(optional) Specifies the authentication provider used to satisfy application-specific message security requirements. 

If this attribute is not specified, a default provider is used, if it is defined for the message layer. 

if no default provider is defined, authentication requirements defined in the message-security-binding are not enforced.