How to add ;wsse:UsernameToken; WS security header to BW SOAP request.

How to add ;wsse:UsernameToken; WS security header to BW SOAP request.

book

Article ID: KB0073939

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks 5.x

Description

How to add the following WS security header to BW SOAP request.

<soapenv:Envelope xmlns:bsvc="urn:com.workday/bsvc" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
   <soapenv:Header>
      <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
         <wsse:UsernameToken wsu:Id="UsernameToken-3">
            <wsse:Username>username</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Password>
            <wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">XAhka8yElpPZ8X7YVhFXHA==</wsse:Nonce>
            <wsu:Created>2013-06-10T16:24:57.982Z</wsu:Created>
         </wsse:UsernameToken>
      </wsse:Security>
   </soapenv:Header>
   <soapenv:Body>
...

 

Issue/Introduction

How to add ;wsse:UsernameToken; WS security header to BW SOAP request.

Resolution


The UsernameToken carries user name and password. It is used for SOAP message authentication. It follows OASIS: Web Services Security UsernameToken Profile 1.0 standard.

To generate a UsernameToken in BW  you can use BW security policy and security policy association resource.  First, you can create a security policy resource (policy type = outbound, authentication enabled ) and select UsernameToken in Authentication Tab. Then create a security policy association and apply the security policy to your SOAP Request Reply activity.