Use trace string: com.ibm.ws.security.*=all=enabled and maybe com.ibm.wsspi.wssecurity.*=finest