##### To create an Identity Assertion Trust

1. In the Admin Console tree component, expand the Configurations node.
2. Select the instance to configure:
   - To configure a particular instance, select the instance’s config node. For example, the default instance, `server`, select the `server-config` node.
   - To configure the default settings for all instances, select the `default-config` node.
3. Expand the Security node and click Trust Configurations.
4. In the Trust Configurations page, click New top open the New Trust Configuration page.
5. In the Name filed, specify a unique name for the identity assertion trust.
6. Enable Default Trust to set this trust configuration as the default.
7. Specify a trust type for the configuration.

   - Select Trust Hosts/Domains to identify specific hosts or domains as trusted entities.

   - Select Trust Handler to enable users to have custom implementations to determine trust.

8. If you have selected Trust Hosts/Domains in the previous step, provide the following information about the trust entities.

   - Entity Name: A unique name for the trusted entity.

   - Apply To: Specify if this trust configuration applies to incoming or outgoing messages.

   - Network Address: Specify the IP address of the trusted host. The value can be specified in dotted-pair or IPv6 notation. The value can also be 0.0.0.0, any, ANY or INADDR_ANY (all IP addresses).

   - Host Name: Specify the name of the trusted host. If you specify a domain, say example.com, all the hosts belonging to that domain will be trusted.

   - Principal: Specify the principal of the servlet client.

9. If you have selected Trust Handler in Step 7, provide the following information about the custom implementation.

   - Class Name: Specify the implementation class name that implements `com.sun.enterprise.security.trust.TrustHandler`

10. Click OK to save your changes.