...
ws-security.sts.client | A reference to the STSClient class used to communicate with the STS. |
ws-security.sts.applies-to | The "AppliesTo" address to send to the STS. The default is the endpoint address of the service provider. |
ws-security.sts.token.usecert | If true, writes out an X509Certificate structure in UseKey/KeyInfo. If false (the default), writes out a KeyValue structure instead. |
ws-security.sts.token.do.cancel | Whether to cancel a token when using SecureConversation after successful invocation. The default is "false". |
ws-security.cache.issued.token.in.endpoint | Set this to "false" to not cache a SecurityToken per proxy object in the IssuedTokenInterceptorProvider. This should be done if a token is being retrieved from an STS in an intermediary. The default value is "true". |
ws-security.sts.disable-wsmex-call-using-epr-address | Whether to avoid STS client trying send WS-MetadataExchange call using STS EPR WSA address when the endpoint contract contains no WS-MetadataExchange info. The default value is "false". |
ws-security.sts.token.crypto | A Crypto object to be used for the STS. See here for more information. |
ws-security.sts.token.properties | The Crypto property configuration to use for the STS. See here for more information. |
ws-security.sts.token.username | The alias name in the keystore to get the user's public key to send to the STS for the PublicKey KeyType case. |
ws-security.sts.token.act-as | The token to be sent to the STS in an "ActAs" field. See here for more information. |
ws-security.sts.token.on-behalf-of | The token to be sent to the STS in an "OnBehalfOf" field. See here for more information. |
ws-security.issue.after.failed.renew | Whether to call "Issue" if a token "Renew" fails. Some STSs do not support the renew binding. Defaults to "true". |
Configuring via Spring
The properties are easily configured as client or endpoint properties--use the former for the SOAP client, the latter for the web service provider.
...