Configuring secure sessions between clients and services using wsadmin scripting

Use the wsadmin tool, which supports the Jython and Jacl scripting language, to edit trust service configurations. Use the STSManagement command group for the AdminTask object to specify details related to secure sessions between clients and target services.

About this task

The trust service uses the secure messaging mechanisms of the Web Services Trust (WS-Trust) specification to define additional extensions for issuing, exchanging, and validating security tokens. Use the STSManagement command group for the AdminTask object to configure the trust service using the wsadmin tool. Complete any of the following tasks using the STSManagement commands:

Procedure

  • Manage token provider configurations.

    Use the wsadmin tool to manage token providers. Customize token providers by defining properties such as token type schema URI, handler factory, cache cushion time, class name, and token timeout. You can also allow or restrict the use of post-dated tokens, distributed cache, and renewable tokens after timeout.

  • Query existing token provider configurations.

    Use the wsadmin tool to query the existing trust service token provider configuration.

  • Manage endpoint token assignments.

    Use the wsadmin tool to assign, unassign, and modify endpoint token assignments.

  • Refresh your configuration changes.

    Use the wsadmin tool to force the trust service to reload the token provider configuration during run time. Complete this action to use new configuration changes before you restart the application server.

What to do next

Use the topics about managing token providers using the STSManagement group of commands and the AdminTask object.