How to insert security headers thru BPEL Process

Question

I am new to BPEL process creation and stuff, but I need to complete a task in which I need
1.Create a BPEL process which accepts Username and password and set it into the soap request header as follows;
<soapenv:Header>
<wsse:Security soapenv:mustUnderstand="1"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
ty-secext-1.0.xsd">
<wsse:UsernameToken wsu:Id="UsernameToken-24438666"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurit
y-utility-1.0.xsd">
<wsse:Username>Username </wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token
-profile-1.0#PasswordDigest">password </wsse:Password>
<wsse:Nonce>syVMUbFNvaQAfQaDpVDolA==</wsse:Nonce>
<wsu:Created>2009-03-25T22:55:51Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
</soapenv:Header>
Can you please let me know what all steps I need follow in order to introduce the soap:header with wsse :security header settings. I am using 10.1.2.
I tried to do it by importing a schema wsse.xsd into my WSDL file. and in bpel.xml I set the properties as follows,
<property name="wsdlLocation">AccruentService.wsdl</property>
<property name="wsseUsername">username</property>
<property name="wssePassword">password</property>
<property name="wsseHeaders">credentials</property>
but does not put in the required header.
I dont know if I need to do anything else, Please help.

Answer 1

Hi,
Thanks for the quick reply.
I tried doing he same as mentioned in the link that u provided, but I got struck at this;
I did not understand why we are doing this;
<bpelx:insertAfter>
<bpelx:from variable="pswd" query="/wsse:Password"/>
<bpelx:to variable="userNameToken" query="/wsse:UsernameToken/wsse:Username"/>
</bpelx:insertAfter>
<bpelx:append>
<bpelx:from variable="userNameToken" query="/wsse:UsernameToken"/>
<bpelx:to variable="securityContext" query="/wsse:Security"/>
</bpelx:append>
after doing this and deploying, my request when tested thru SOAPUI looks like this with not security headers
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:add="http://schemas.xmlsoap.org/ws/2003/03/addressing" xmlns:acc="http://www.accruent.com/">
<soapenv:Header>
<add:MessageID>?</add:MessageID>
<add:ReplyTo>
<add:Address>?</add:Address>
<!--Optional:-->
<add:ReferenceProperties>
<!--You may enter ANY elements at this point-->
</add:ReferenceProperties>
<!--Optional:-->
<add:PortType>?</add:PortType>
<!--Optional:-->
<add:ServiceName PortName="?">?</add:ServiceName>
<!--You may enter ANY elements at this point-->
</add:ReplyTo>
</soapenv:Header>
<soapenv:Body>
....I just removed so that it is short
</soapenv:Body>
</soapenv:Envelope>
the service which I am invoking should