WS-Security Client and Provider sample bindings with SHA256 signature algorithms

Resolving The Problem

A new set of client and provider sample general bindings will be added to the application server with APAR PI58160 in fixpacks 7.0.0.43, 8.0.0.13, and 8.5.5.10:

• Provider sample SHA256


This binding is the same as the standard provider sample binding, except 1) it adds the SignatureAlgorithm custom property for the SHA256 signature algorithms to all the symmetric and assymetric sign parts and 2) it contains the SAML Bearer token consumers. You should modify this binding to meet your security requirements before using it in a production environment.

• Client sample SHA256


This binding is the same as the standard client sample binding, except 1) to all the symmetric and assymetric sign parts, it adds the SignatureAlgorithm custom property for the SHA256 signature algorithms and 2) it contains the SAML Bearer token generators. You should modify this binding to meet your security requirements before using it in a production environment.

1. Download the Provider sample SHA256.zip and Client sample SHA256.zip files attached to this document
• Ensure that the files are placed in a directory that is accessible to the browser on which you will run the administrative console.
2. In the administrative console, navigate to Services > Policy sets
3. Import the new provider general binding
1. Click General provider policy set bindings > Import
2. Click Browse
3. Enter the fully-qualified path to the Provider sample SHA256.zip file that you downloaded from this document.
4. Click Open, then OK
4. Import the new client general binding
1. Click General client policy set bindings > Import
2. Click Browse
3. Enter the fully-qualified path to the Client sample SHA256.zip file that you downloaded from this document.
4. Click Open, then OK
5. Click Save