Show TOC

WS Security UsernameTokenLocate this document in the navigation structure

Use

The UsernameToken is a security token that is defined in the WS Security standard. It is a mechanisms with which the user ID and password can be transported within a SOAP message.

If you are using UsernameTokens, an element SOAP:Envelope/SOAP:Header/wsse:Security/wsse:Username is added to the message, which contains a time stamp, a user name, and a password.

AS Java also supports password hash values. In this case, an SHA-1 hash value of the base64-encrypted password is calculated and added to the password element.