Security Mechanism

Defines the type of security credential that is used to secure the security token itself, or the security credential accepted by the Security Token service from the incoming WS-Trust request sent the by the client. You can choose from the following security types:

• Anonymous — The anonymous security mechanism contains no security credentials.

• KerberosToken — Uses Kerberos tokens.

• LibertyBearerToken – Uses the Liberty-defined bearer token.

• LibertySAMLToken – Uses the Liberty-defined SAML token.

• LibertyX509Token – Uses the Liberty-defined X509 certificate.

• SAML-HolderOfKey — Uses the SAML 1.1 assertion type Holder-Of-Key.

• SAML-SenderVouches — Uses the SAML 1.1 assertion type Sender Vouches.

• SAML2–HolderOfKey — Uses the SAML 2.0 assertion token type Holder-Of-Key.

• SAML2–SenderVouches — Uses the SAML 2.0 assertion token type Sender Vouches.

• UserNameToken — Uses a user name token to secure the Security Token service requests.

• UserNameToken-Plain — Uses a user name token with a clear text password for securing Security Token service requests.

• X509Token — Uses the X509 certificate to secure the Security token.