Skip to main content


developerWorks  >  SOA and Web services  >

Configure secure Web services communications through an ESB

Web services security using WebSphere Service Integration technologies

developerWorks

Level: Advanced

Vivek Gadiyar (gadiyar@us.ibm.com), Architect, IBM
Tendai Chinoda (tendai@us.ibm.com), Advisory Software Engineer, IBM

22 Nov 2005

Register now or sign in using your IBM ID and password.

Use IBM WebSphere® Application Server V6.0 Service Integration technologies to secure SOAP over HTTP requests to an example Bank Application Web service. The example provides authentication of SOAP/HTTP user requests and authorization of SOAP over HTTP user requests for specific operations. It shows you how to provide secure internet accessibility to the Bank Application so that customers can retreive their account information.

In this tutorial

  • Enterprise Service Bus overview

  • Bank Application Web services implementation

  • Enable global security

  • Configure the SIBWS for secure communications

  • Create the WS-Security configuration resource

  • Create the WS-Security binding resource

  • Associate inbound port with WS-Security binding and configuration resources

  • Create operation-level security and role-based authorization EAR file

  • Import authorization EAR files for assembly

  • Enable J2EE role-based authorization

  • Complete assembly of the role-based authorization EAR file

  • Enable operation-level security

  • Deploy authorization EAR file

  • Test the Web service client authentication and authorization

  • Troubleshooting

Prerequisites


System requirements

To run the examples in this tutorial, you need WebSphere Application Server Version 6.0 Network Deployment (trial version available).



Duration

Under two hours


Formats

html, pdf


Share this....

digg Digg this story del.icio.us del.icio.us Slashdot Slashdot it!


Back to top


Document options

Document options requiring JavaScript are not displayed


My developerWorks needs you!

Connect to your technical community