Username token policy with webService provider

, ,
1

Hi Al,

I am trying to do a poc on webServices along with policies. My need is create a webService provider, add a
username token policy to it, share the WSDL to the consumer to enforce to follow the policy. I am using wM9.7 version

Created a simple flow service, created a webService provider to it and placed the ( policy file ) at
\IntegrationServer\instances\default\config\wss\policies location.
After this, opened the provider WSD in designer, clicked on policies tab, right click and selected the username token policy.

When I observed WSDL URL, I can see wp:Policy section but when I tried to consume the same in Soap, I didn’t see any sort of security related enforcement.

Below is the policy which I did use:

Username_Token.policy

<wsp:Policy wsu:Id=“Username_token” Name=“Username_token”
xmlns:wsu=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd”
xmlns:wsp=“Web Services Policy Framework (WS-Policy) and Web Services Policy Attachment (WS-PolicyAttachment)”>

wsp:ExactlyOne
wsp:All
<sp:SignedSupportingTokens xmlns:sp=“Web Services Security Policy Language (WS-SecurityPolicy)”>
wsp:Policy
<sp:UsernameToken sp:IncludeToken=“WS-SecurityPolicy Token Inclusion Mechanism”>
</sp:UsernameToken>
</wsp:Policy>
</sp:SignedSupportingTokens>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>

Please help me what did I miss ?

Thanks for your time and support.

Thanks,
RP

2

As in consumer WSD, you also need to explicitly assign policy under the policies tab.
It won’t pick up the policy from WSDL directly.

I guess they don’t want to just support any policy coming from other systems that are embedded in the WSDL file.
HTH,

3

Yes, as part of SOAP tool as well, option exist to make to “Add WSS username token”, better try in that way.

Thanks,

1 Like
4

Thank you both, I tried and its working.

Thanks,
RP

5

I added policy in consumer wsdl and provided the credentials in message level. But still i am getting below error.
Integration broker response
status code-20
MessageID -535
Meesage- user Password required for service operation

below policy file i have put in the server.

<wsp:Policy wsu:Id=“UsernameTokenSecurityPolicyPasswordRequired” Name=“Username token required”
xmlns:wsp=“Web Services Policy Framework (WS-Policy) and Web Services Policy Attachment (WS-PolicyAttachment)”
xmlns:wsu=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd”>
wsp:ExactlyOne
wsp:All
<wsse:SecurityToken wsp:Usage=“wsp:Required” xmlns:wsse=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd”>
wsse:TokenTypewsse:UserNameToken</wsse:TokenType>




</wsse:SecurityToken>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>

Please help ASAP.