IVCred module properties

You can define Verify Identity Access IVCred token module self or partner properties.

Table 1. IVCred module properties
Appliance Property	Self or Partner	Mode	Description
ivcred.attribute.types	SELF	Issue	Specifies the attribute type to include in the assertion. Enter one attribute type, or use an asterisk () for all types. The default is an asterisk (``). This property is required.
ivcred.sign.keystore.alias.db	SELF	Issue	Specifies the name of the keystore for the signing key. For example, use `DefaultKeyStore`. This property is required if ivcred.add.signatures=true.
ivcred.sign.keystore.alias.cert	SELF	Issue	Specifies the name of the signing key. For example, use `testkey`. This property is required if ivcred.add.signatures=true.
ivcred.add.signatures	SELF	Issue	Specifies that signatures must be added to tokens. Set to `true` to add signatures to tokens. Set to `false` to exclude signatures in tokens. This property is optional.
ivcred.signing. IncludeX509SubjectKeyIdentifier	SELF	Issue	Specifies whether to include this attribute. Set to `true` to include the X509 Subject Key Identifier of the signing certificate. Set to `false` to exclude the X509 Subject Key Identifier. This is the default. Required if `ivcred.add.signatures=true`.
ivcred.signing.IncludePublicKey	SELF	Issue	Specifies whether to include the KeyInfo element, Public Key. Set to `true` to include the Public Key. Set to `false` to exclude the Public Key. This is the default. Required if ivcred.add.signatures=true.
ivcred.signing. IncludeX509IssuerDetails	SELF	Issue	Specifies whether to include the Key Info element, X509 Issuer Details. Set to `true` to include the X509 Issuer Details. Set to `false` to exclude the X509 Issuer Details. This is the default. Required if ivcred.add.signatures=true.
ivcred.IncludeX509SubjectName	SELF	Issue	Specifies whether to include the Key Info element, X509 Subject Name. Set to `true` to include the X509 Subject Name. Set to `false` to exclude the X509 Subject Name. This is the default. Required if ivcred.add.signatures=true.
ivcred.IncludeX509CertificateData	SELF	Issue	Specifies whether to include the Key Info element, X509 Certificate Data. Set to `true` to include the X509 Certificate Data. Set to `false` to exclude the X509 Certificate Data. This is the default. Required if ivcred.add.signatures=true.
ivcred.validate.keystore.alias.db	PARTNER	Validate	Specifies the name of the keystore for the key identifier. For example, use `DefaultKeyStore`. Required if ivcred.verify.signatures=true.
ivcred.validate.keystore.alias.cert	PARTNER	Validate	Specifies the name of the validation key identifier. For example, use `testkey`. Required if ivcred.verify.signatures=true.
ivcred.verify.signatures	PARTNER	Validate	Specifies whether the signatures are verified. Set to `true` to verify signatures. Set to `false` for no signature verification. The default is `false`. This property is optional.