Application Developer/Assembler

The application developer/assembler is responsible for the following message security tasks:

• Determining if an application-specific message protection policy is required by the application

  If so, the developer ensures that the required policy is specified at application assembly time.

• Specifying how web services should be set up for message security

  Message security can be set up by the administrator so that all web services are secured, or by the application deployer when the security provider or protection policy bound to the application must be different from that bound to the container.

• Turning on message security if authorized to do so by the administrator