Wednesday, October 12, 2011

OWSM policies to access secured web services from Oracle SOA

Oracle Fusion Middleware 11g Release 1 (10.3.x) products install a portability layer on top of
WebLogic Server that integrates Oracle Web Services Manager WS-Security policies into the WebLogic Server environment. This portability layer provides Oracle WSM WS-Security policies that  can be used to protect WebLogic Server JAX-WS Web services and Web service clients.
  • If you develop WebLogic Server JAX-WS Web services or clients that interact with SOA Composite Services, ADF Components, or WebCenter Services, then you should use the Oracle WSM WS-Security policies.
  • If you develop only WebLogic Server native Java JAX-WS Web services, then you should use WebLogic Server's WS-Security policies.

HTTP Basic authentication for composites calling secured services

  • Setup username and password on SOA

    • Weblogic Domain-->Base Domain--> Security-->Credentials 

  • Create a map oracle.wsm.security

    •  Create key; basic.credentials and csf-key 




Modify composites calling secured services

  • Right click on the web services adapter in the composite and add the security policy


To use a custom key instead of csf-key, create a key test-key using enterprise manager










Change the composite and override the default key



For questions, comments and feedback  please contact:
 Harvinder Singh Saluja


OCI Knowledge Series: OCI Infrastructure components

  Oracle Cloud Infrastructure (OCI) provides a comprehensive set of infrastructure services that enable you to build and run a wide range of...