Invoking Web Services with WS-Security

You can invoke Web Services using a secured JAX-WS call from a Web application.

You can use different security mechanisms. The setting described here explains how to configure the UserNameToken or Lightweight Third Party Application (LTPA) Token for Web Service authentication. The UserNameToken, or LTPA Token is embedded in the SOAP message header and checked by the Web Service provider for authentication and authorization.

The WebSphere® Application Server JAX-WS implementation supports UsernameToken Profile from OASIS standard WS-Security, and LTPA Token which is used by IBM WebSphere products.