OSB 11 g - authentication - username and password in the SOAP body

Hello

I have a PS based on WSDL supplied by the customer. According to the WSDL, the client will send the username and password (to be used for authentication) in the SOAP body. I have extracted the username and password of the body and authenticate and then only process data.

The approach I think is to create two PS first PS will be called by the client to send the data. There is no authentication required for this Psalm once this PS (PS-1) receives the message, it will extract the user name, password and the data in the SOAP body. It will then set the user name and password in the second PS (PS-2) HTTP header and data in the SOAP body from the PS-2.

PS - 2 will be under Basic authentication. PS - 2 will accept data as the single charge. After receiving the data, it will be the normal processing.

But I don't see a way to set the HTTP (authorization) header to the second Psalm of my approach is correct? Is there an other/better approach?

I went through this link [http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/security/model.html] and found that we may have to set up another authentication provider. How to do this?

Thank you
Sanjay

Hello Sanjay

Your approach seems correct for me (using two proxies) but instead to set the username and password in the HTTP header, you can set them as SOAP header and use the OSB custom authentication method. For more information on this topic, please see-

http://download.Oracle.com/docs/CD/E17904_01/doc.1111/e15866/message_level_cust_auth.htm#i1069719

Kind regards
Anuj

Tags: Fusion Middleware

Similar Questions

Maybe you are looking for