# IdentityAsserterMBean (Abstract)

Overview | Related MBeans | Attributes | Operations

## Overview

The SSPI MBean that all Identity Assertion providers must extend. This MBean enables an Identity Assertion provider to specify the token types for which it is capable of asserting identity.

Fully Qualified Interface Name | If you use the `getMBeanInfo` operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name: `weblogic.management.security.authentication.IdentityAsserterMBean`
Factory Methods | No factory methods. Instances of this MBean are created automatically.
Access Points Inherited from AuthenticationProviderMBean | Because this MBean extends or implements AuthenticationProviderMBean, you can also access this MBean by retrieving AuthenticationProviderMBeans. The following attributes contain AuthenticationProviderMBeans and its subtypes:
RealmMBean.AuthenticationProviders |
Subtypes | The following MBeans extend or implement this MBean type:
DefaultIdentityAsserterMBean LDAPX509IdentityAsserterMBean NegotiateIdentityAsserterMBean RealmAdapterAuthenticatorMBean | SAMLIdentityAsserterMBean SAMLIdentityAsserterV2MBean

## Related MBeans

This section describes attributes that provide access to other MBeans. For more information about the MBean hierarchy, refer to WebLogic Server MBean Data Model.

Realm |

### Realm

Returns the realm that contains this security provider. Returns null if this security provider is not contained by a realm.

Privileges | Read only
Type | RealmMBean
Relationship type: | Reference.

## Attributes

This section describes the following attributes:

ActiveTypes Base64DecodingRequired Description Name | SupportedTypes Version

### ActiveTypes

Returns the token types that the Identity Assertion provider is currently configured to process.

Privileges | Read/Write
Type | class java.lang.String[]

### Base64DecodingRequired

Returns whether the tokens that are passed to the Identity Assertion provider will be will base64 decoded first. If `false` then the server will not base64 decode the token before passing it to the identity asserter. This defaults to `true` for backwards compatibility but most providers will probably want to set this to `false`.

Privileges | Read/Write
Type | boolean
Default Value | true

### Description

Returns a description of this security provider.

Each security provider's MBean should set the default value of this read-only attribute to a string that describes the provider. In other words, each security provider's MBean hard-wires its description. There are no conventions governing the contents of the description. It should be a human readable string that gives a brief description of the security provider.

Privileges | Read only
Type | java.lang.String
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server.

### Name

The name of this configuration. WebLogic Server uses an MBean to implement and persist the configuration.

Privileges | Read only
Type | java.lang.String
Default Value | Provider
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server.

### SupportedTypes

Returns the list of token types supported by the Identity Assertion provider.

To see a list of default token types, refer the Javadoc for `weblogic.security.spi.IdentityAsserter`

Privileges | Read only
Type | class java.lang.String[]
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server.

### Version

Returns this security provider's version.

Each security provider's MBean should set the default value of this read-only attribute to a string that specifies the version of the provider (e.g. 7.3.04). In other words, each security provider's MBean hard-wires its version. There are no conventions governing the contents of the version string.

Privileges | Read only
Type | java.lang.String
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server.

## Operations

This section describes the following operations:

wls_getDisplayName |

### wls_getDisplayName

Operation Name | `"wls_getDisplayName"`
Parameters | `null`
Signature | `null`
Returns | `String`