Configuring WS-Security for JAX-WS web services in WebSphere Process Server V7

About this tutorial

This tutorial describes how to configure WS-Security for a JAX-WS web service to run in WebSphere Process Server V7 in one WebSphere cell, and a JSP client to run in a different WebSphere cell. It also provides the steps needed for single sign-on across WebSphere cells.

Although WS-Security addresses message-level authentication, confidentiality, and integrity, the scope of WS-Security in this tutorial is limited to propagating credentials through the use of Lightweight Third Party Authentication (LTPA) tokens. Other means of propagating credentials in the WS-Security envelope are supported in WebSphere Application Server.

Objectives

The objective of this tutorial is to make it easy for WebSphere users to configure WS-Security for a JSP client to run in a WebSphere cell, and a JAX-WS web service to run in a WebSphere Process Server cell.

Back to top

Prerequisites

To follow the steps in this tutorial, you need WebSphere Integration Developer V7 to generate and configure the JSP client and the JAX-WS web service. The WebSphere Process Server test environment that comes with WebSphere Integration Developer is adequate to run the test, but you need to create another WebSphere cell for the JSP client to demonstrate the single-sign on capability through LTPA.

Back to top

System requirements

• WebSphere Integration Developer V7
• WebSphere Process Server V7 test environment that comes with WebSphere Integration Developer
• Another WebSphere cell

Back to top

Duration

This tutorial takes about 2 hours to complete.

Back to top

Download files

There are two project interchange files listed in the Download section of the tutorial:

• PI_Start.zip
• PI_Final.zip

1 of 14 | Next

Comments

Back to top

Table of contents

• About this tutorial
• Introduction
• Configuring single sign-on
• Using the sample code
• Adding a security role for the dynamic web module TestJAXWSClient
• Creating a custom WS-Policy
• Attaching the custom WS-Policy to the web service and the web service client
• Creating a custom WS-Policy binding for the web service
• Creating a custom WS-Policy binding for the web service client
• Testing the web service client
• Conclusion
• Downloads
• Resources
• About the author

---

1 of 14 | Next

Next steps from IBM

Rational Application Developer provides a comprehensive Integrated Development Environment (IDE) used to develop Web 2.0 applications requiring J2EE, Servlets and JavaServer Pages (JSPs).

---

• Try: Try the free Rational Application Developer (RAD), which helps developers quickly design, develop, test, analyze, and deploy high-quality Java, Javaserver pages, J2EE and Web 2.0 applications.
• Article: See how Rational Application Developer and Service Data Objects have been extended to JavaServer Pages to create data views and database queries using a simple, wizard-based, drag-and-drop technology.
• Tutorial: Take a look at developing a J2EE Web application and JavaServer Pages (JSPs) for both an HTML input form and the HTML output from the server, using Rational Application Developer.
• Demo: This demo highlights the enhanced Web 2.0, rich Internet application development features in Rational Application Developer including AJAX and Java Persistence API application development.
• Buy: Rational Application Developer for WebSphere Software

Dig deeper into WebSphere on developerWorks

IBM SmartCloud trial. No charge.

Unleash the power of hybrid cloud computing today!

---

Public and private solutions in one trial.

Special offers