Configuring a Trust

You can create a P-asserted identity trust configuration in one of these ways:

• In the Admin Console, open the Security component under the relevant configuration and go to the Trust Configurations page. For details, click the Help button in the Admin Console.

• Use the asadmin create-trust-config command to create trust configurations on local servers. For details, see the Sun GlassFish Communications Server 2.0 Reference Manual.

The default trust handler trusts all hosts and maps the P-Asserted-Identity header values to a format suitable for use in authentication and authorization tasks. For example, Cullen Jennings is mapped to CullenJ. To create a custom trust handler, see Creating a Custom Trust Handler for P-Asserted Identity Authentication.