The Identification Profile

Note:

Keep the following in mind:

If you specify multiple identifiers, the system evaluates them with the identifier defined in the Identify Consumer action.

If you want to authenticate consumers, make sure that your policy enforcement point is configured to enable authentication. For information, see the webMethods Mediator documentation or the documentation for your third-party PEP.

Note:

The value(s) that you specify in the Identification profile depend on how the run-time policy's Identify Consumer is configured. For example, if Identify Consumer is configured to identify consumers by their IP address, you should specify the consumer IP addresses here. For information about this action, see the Built-In Run-Time Actions Reference for Virtual Services.

In this field...	Do the following...
IPv4 Address	Identify consumers based on their originating 4-byte IP address. Use this field when the Identify Consumer action is configured to identify consumer applications by IP address. To specify an individual IP address, type the address in the From field. The application asset will identify only those requests that originate from the specified IP address. To specify a range of IP addresses, type the lowest IP address in the From field and the highest IP address in the To field. For example, the values 192.168.0.0 and 192.168.0.10 indicates that requests originating from any IP address that lies between the specified range will be identified by the application asset. If you need to specify additional IP addresses, use the plus button to add more rows.
IPv6 Address	As for IPv4 Address, but using the 128-bit IPv6 format. For example: 1234:5678:9ABC:DEF0:1234:5678:9ABC:DEF0.
Identification Token	Identify consumers based on one or more of the following kinds of identification tokens: Use this field when the Identify Consumer action is configured to identify consumer applications by host name, HTTP user name, WSS user name or a custom token. Host Name—To identify consumers based on a specified host name, type the host name (for example, pcmachine.ab.com) in the Name field. The application asset will identify only those requests that originate from the specified host name. HTTP Authentication Token—To authenticate consumers based on the user name that is transmitted in an HTTP authentication user token, type the user name (for example, testuser123) in the Name field. The application asset will identify only the requests that contain the specified user name encoded and passed in the HTTP authentication user token. Authentication is handled by LDAP or another external authentication mechanism. You can specify the kinds of HTTP headers that Mediator will pass from requests to services. The default is the Authorization header. To configure Mediator to pass other kinds of HTTP headers, see the Mediator documentation. WS-Security Authentication Token—To authenticate consumers based on the user name that is transmitted in the SOAP or XML message header (HTTP body), type the user name (for example, userwss) in the Name field. The application asset will identify only the requests that contain the specified user name passed in the SOAP or XML message header. Authentication is handled by LDAP or another external authentication mechanism. Custom identification token (XPath)—To identify consumers based on the result of applying an XPath expression on the SOAP or XML message or request, enter the XPath expression in the Name field. For example, typing //[local-name()='Envelope']/[local-name()='Body']/[local-name()='echoInt']/[local-name()='echoIntInput='][.='2'] in the Name field will identify the requests that contain the XPath and the consumers. If you need to specify additional tokens, use the plus button to add more rows.
Consumer Certificate	Identify consumers based on information in an X.509 v3 certificate. Use this field when the Identify Consumer action is configured to identify consumer applications by a consumer certificate. Click Browse to locate the certificate (.cer) file and select the certificate file.