Previous Topic: Variable for Specifying the Generated WS-Security Token Type

Next Topic: Variables for Generating SAML Tokens

Variables for Generating Username and Password and X.509 Certificate Tokens

The following table describes the response variable name/value pairs associated with generating username and password (digest or clear text) and X.509 certificate tokens.

Variable Name

Variable Value

Attribute Type

Meaning

TXM_WSSEC_USER_PASSWORD

 

userpassword

(Value most common for LDAP user directories -- if you have used a custom naming scheme for your LDAP directory, the value will be different.)

User Attribute

Specifies the LDAP query string that the SOA Agent uses to retrieve the web service consumer’s password from the user store. This value is then placed in the token.

Or

password

Static

Specifies a static password value to be used in the token.

TXM_WSSEC_ROLE

(Optional)

token_role_name

Static

Specifies the value of a SOAP role attribute that identifies the WS‑Security header element containing the Username and Password or X.509 token.

TXM_WSSEC_TIMESTAMP

(optional)

  • True
  • False

Static

If True, tells the agent to add a wsu:Timestamp element to the WS‑Security SOAP header that specifies the time that the message was created

TXM_WSSEC_TIMESTAMP _EXPIRY

(Valid only if TXM_WSSEC_TIMESTAMP is True)

message lifespan in seconds

Static

Tells the agent to add a wsu:Expires element to the wsu:Timestamp element in the WS‑Security SOAP header. The value of the wsu:Expires element is an absolute time based on the time of message creation and the specified message lifespan.

TXM_WSSEC_SIGNATURE

(optional)

  • all
  • body_ts
  • body
  • headers

Static

For WS‑Security tokens of type password or X509, tells the agent to retrieve the enterprise private key from the Smkeydatabase and use it to digitally sign all or part of the SOAP document:

  • all—the generated signature will cover the entire SOAP envelope.
  • body_ts—the generated signature will cover the SOAP body and the generated <wsu:Timestamp> element. If a timestamp response attribute is not configured, a message will be logged and the signature will cover only the SOAP body.
  • body—the generated signature will cover the SOAP body.
  • headers—the generated signature will cover the SOAP header containing the generated/modified WS‑Security element.

By default, tokens are signed using RSA-SHA1.

TXM_WSSEC_SIGNATURE_ALG

(Valid only if TXM_WSSEC_SIGNATURE is set)

  • rsa-sha1 (default)
  • rsa-sha256

Static

  • For WS‑Security tokens of type password or X509, defines the signature algorithm the agent uses to sign the part of the SOAP document defined by TXM_WSSEC_SIGNATURE.

More information:

Username and Password Digest Token

X509v3 Certificate Token

Supported Authentication Schemes for Producing Each WS-Security Header Type