A Java Authentication and Authorization Service (JAAS) login configuration that is used to authenticate a security token in a Web service security header.