Timestamp and Nonce value in SOAP header

Hi, can you provide some guidance on how to handle this Oracle SOA suite 11g
My application was calling an external web service which was just expecting the user name and password. So I was using username_token_client_policy with a csf key
Now the external web service has changes and they are expecting TimeStamp ( Created & Expires ) and Nonce value to be sent. Below is the format of the SOAP header they are expecting.
Can someone share what OWSM policy I have to use to build such a SOAP header or should I build the values in my bpel during bpelInputHeaderVariable
<wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsu:Timestamp wsu:Id="TS-15">
<wsu:Created>2013-06-06T22:03:54.397Z</wsu:Created>
<wsu:Expires>2013-06-06T22:04:54.397Z</wsu:Expires>
</wsu:Timestamp>
<wsse:UsernameToken wsu:Id="UsernameToken-14">
<wsse:Username></wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText"></wsse:Password>
<wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"></wsse:Nonce>
<wsu:Created>2013-06-06T22:03:49.384Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>

i need to get USERNAME and PWD in my Soap header for consuming Webservice using SAP PI ,
Can be achieved by XSL Mapping or SOAP Axis Adapter. Search on SDN for further details as this has been discussed many a times on the forum.
should i need to get some certificates from client and deploy it or should we do anything in SAP PI and send to soap header or can hard code it and send to webservice, please help me in this t
First you need to confirm whether certificates are required or not. Might be the web service is using user id / password security (basic authorization).
How to use certificates in PI - Search on SAP Help, this has been explained in great details over there.

Similar Messages

WS-security Need to Get Username and Password and time Stamp in SOAP Header

HI ALL,
i need to get USERNAME and PWD in my Soap header for consuming Webservice using SAP PI ,
and my SOAP Header should look like this
<soapenv:Header>
<wsse:Security soapenv:mustUnderstand="1"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurityutility-
1.0.xsd"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wsswssecurity-
secext-1.0.xsd">
<wsu:Timestamp wsu:Id="Timestamp-296915943">
<wsu:Created>2008-06-05T18:30:59.904Z</wsu:Created>
<wsu:Expires>2009-06-05T18:35:59.904Z</wsu:Expires>
</wsu:Timestamp>
<wsse:UsernameToken wsu:Id="UsernameToken-192809888">
<wsse:Username>midtier-service</wsse:Username>
xxxxxxxx: Confidential Green 10
<wsse:Password Type="http://docs.oasisopen.
org/wss/2004/01/oasis-200401-wss-username-token-profile-
1.0#PasswordText">password</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soapenv:Header>
should i need to get some certificates from client and deploy it or should we do anything in SAP PI and send to soap header or can hard code it and send to webservice, please help me in this t
hanking you
Sridhar

i need to get USERNAME and PWD in my Soap header for consuming Webservice using SAP PI ,
Can be achieved by XSL Mapping or SOAP Axis Adapter. Search on SDN for further details as this has been discussed many a times on the forum.
should i need to get some certificates from client and deploy it or should we do anything in SAP PI and send to soap header or can hard code it and send to webservice, please help me in this t
First you need to confirm whether certificates are required or not. Might be the web service is using user id / password security (basic authorization).
How to use certificates in PI - Search on SAP Help, this has been explained in great details over there.

How do pass the UserID and Password in the SOAP header for web services

I am encountering issues trying to pass the userid and password in the SOAP header when consuming a 3rd party web service. Rostewitz posted something similiar but I don't know how to type iv_xml. Any help would be greatly appreciated.
Thank you,
jpina

It helps to post a link to a thread when you refer to it. If you are trying to implement that solution though, you can look at the parameter of the corresponding method being called. The parameter has type 'SIMPLE' which means that it is compatible with all of the predefined elementary ABAP types. In this case, you should use 'STRING'.

Calling A Secured webservice using Username and password in the Soap header

I want to call a secured webservice.
The Username and password should be sent with the payload in the SOAP Header
as
<wsse:Security S:mustunderstand="0" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken wsu:Id="SecurityToken-XXXXXXXXXXXXXXXXXXXXXXXXX" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>uname</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">pwd</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
Can you please send me the steps?
I tried with giving the username and password under Service Account.
I tried to create a wspolicy under business service. But nothing works...
Please help me at the earliest.
Also please give me steps in sequence.

Now i made sure that the endpoint is available!
Now am getting this error:
<soapenv:Fault>
<faultcode>soapenv:Server</faultcode>
<faultstring>BEA-380002: localhost1</faultstring>
<detail>
<con:fault xmlns:con="http://www.bea.com/wli/sb/context">
<con:errorCode>BEA-380002</con:errorCode>
<con:reason>localhost1</con:reason>
<con:location>
<con:node>RouteNode1</con:node>
<con:path>request-pipeline</con:path>
</con:location>
</con:fault>
</detail>
</soapenv:Fault>
Also in the invocation trace i can observe the following things:
Under Invocation Trace:-
========================
 Receiving request =====> Initial Message context
 ===============================================
 under added header:-
 ==================
 <soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
 </soap:Header>
 under RouteNode1
================
 Route to "TargetMyService_BS"
$header (request):-
<soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
</soap:Header>
Under Message Context changes:-
*===============================*
I can find this element also:-
con:security>
*<con:doOutboundWss>false</con:doOutboundWss>*
*</con:security>*
eventhough we enabled ws security, how the above tag can be false?
I think its getting failed to populate the header with the required login credentials.
The other doubt i have is:-
=================
I have chosen the service account type is static...is this right?

Get Custom SOAP Header Value in SOA Suite 11.1.1.6 using BPEL 1.1

Hi Experts,
We are using SOA Suite 11.1.1.6 and in one of the projects we have requirement to retrieve custom SOAP header value.
This is enhancement to existing process which is developed using BPEL 1.1 and deployed to Production. So we cannot convert this now to BPEL 2.0
We suggested to use custom XML element in Header the definition of which will be defined in custom XSD and stored in common location. However the 3rd party who are invoking this service will not be able to do any customization in their process to pass custom XML header.
Please can you help me in providing any approach through which we can retrieve custom Header value from SOAP header using BPEL 1.1
I have read some blogs for retrieving the custom XML header but they are using BPEL 2.0. I would like achieve this functionality using BPEL 1.1
Appreciate your inputs.
Thanks in Advance - RK

Hello RK,
Have you've tried to put the bpex:outputHeaderVariable on the invoke activity of the invoked service.
<invoke name="Invoke"
bpelx:outputHeaderVariable="HeaderVariable"/>
Where the "HeaderVariable" reflects the XSD Datastructure of the received header.
This is also specified here in section 6.19.1 How to Receive SOAP Headers in BPEL
Please note that the exact header must be specified in the WSDL of the invoked service.
Also note that in case of a soap fault. No header will be returned from the invoked service but only a /soap/body/fault part.
Good luck!
Melvin

In Receiver Mail Adapter ,how to ignore SOAP Header attachment

HI Folks,
Am using Receiver Mail Adapter and am getting 2 attachments.
1. one is Soap header which contains Control records
2. payload
I want only Payload as attachment and need to ignore SOAP Header(AT00001.xml).
The configuration is as below:-Trasport protocol : SMTP
                                            Message Protocol: XIALL
Please provide Inputs.
Thanks & Regards
Ashok Reddy

Hi Gagandeep,
Scenario: File------>mail( Bypass scenario)
i had posted file in FTP and am getting attachment properly but aditionally am getting ATT00001.xml as SoapHeader.this i need to ignore.
PFB Module Parametrs i used:
localejbs/AF_Modules/MessageTransformBean   LocalEnterpriseBean    transform
Modulekey                      Parameterattribute                        value
transform                      Transform.ContentDisposition            attachment;filename=”Pocr_860.txt”
transform                     Tansform.ContentType                       text/plain
Regards
Ashok

Setting up the Soap Header when consuming a web service.

Hi SDN,
I am trying to consume a web service,where I need to pass the soap header for sending the request to the sever.
I am using if_ws_protocol_ws_header->SET_REQUEST_HEADER to set the Username and Password to the soap header. After a lot of trouble shooting I came to conclusion that the Username and Password are not being updated in soap header.
I want to know how to set the soap header? I have tested the web service in the SOAP UI testing tool and it works fine taking the credentials. The webservice is using HTTPS protocol.Do we have any separate config for https. Do I need to pass the nonce and date created in the soap header for sure ? And is there any thing to be configured by basis team?
Here is what I am trying to pass:
' <soapenv:Header>'
 '<wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">'
 '<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">'
 '<wsse:Username>XXXXXXX</wsse:Username>'
 '<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">XXXXX</wsse:Password>'
 '</wsse:UsernameToken>'
 ' </wsse:Security>'
 '/soapenv:Header>'
Thank you.

CONCATENATE
'<soapenv:Header>'
'<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"'
'xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"'
'xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">'
'<wsse:UsernameToken>'
'<wsse:Username>XXXXXX</wsse:Username>'
'<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">XXXXXX</wsse:Password>'
'<wsse:Nonce>' XXXXX'</wsse:Nonce>'
'<wsu:Created>' XXXXX '</wsu:Created>'
'</wsse:UsernameToken>'
'</wsse:Security>'
'</soapenv:Header>'
 INTO l_string.
I solved my self and its working , Here is what I was passed.
Thank you guys.

How to Capture SOAP Header in BPEL

Hi All,
I have a requirement to pass a value from SOAP Header to BPEL and has to capture the value in BPEL and manipulate the data.
In the receive activity i created a variable and assigned Header to it, but iam getting NULL value when i check the instance, this is the code i used in receive
activity.
<receive name="receiveInput" partnerLink="bpelsensor_client" portType="client:BPELSensor" operation="process" variable="inputVariable" createInstance="yes"
bpelx:inputHeaderVariable="headerID"/>
Any suggestions how to do this?

How did you define headerID?
You can also see an example here:
http://java.net/projects/oraclesoasuite11g/pages/BPEL
Arik

Get data from SOAP Header in udf

Hi,
I want to get value of a SOAP header Runtime Field and use it in udf.
The field I need is <SAP:EOReferenceInbound type="TID">. I think I need to use function getTransformationParameters() but I don't know how to use it.
Can you help me to retrieve this value of SOAP Header in a mapping ?
Thank you.

Check this blog: /people/william.li/blog/2009/07/30/how-to-read-soap-header-information
Make sure that your message structure is defined properly so that it even includes the header fields...otherwise it will throw an error....once you get the value in the field then transfer it as you like using the mapping.
From the above blog:
The SOAP sender communication channel gives us an option to send the complete SOAP XML, including the header. Then, we just
need to construct a message type in the Enterprise Service Repository (ESR) or Integration Repository (IR) to represent the XML.
With that, message mapping can be performed.
Regards,
Abhishek.

Pass additional parameter to SOAP header?

We are using webservice datawindows to pass request xmls to call webservices. Additionally we use 'wsconnection' objects authenticationmode, username and password property to send information to SOAP header.
Now we have to send one more value to SOAP header. This new value will be a string(like username).
I checked the wsConnection properties and did not find anything which could be used. Can anyone please advise on it.

If they constructed the web service correctly, the WSDL should include information on the custom header attributes you need to pass. If it's there, any version of PowerBuilder 10.5.1 or later will provide a method you can call to pass it.
Custom header support for .NET Web services

Passing Parameter through SOAP Header in ODIInvokeWebService

How to pass parameters in SOAP Header in ODIInvokeWebService and not just in SOAP Body?
Background:
One of our web service provider expects certain parameters set in SOAP Header. Currently, ODIInvokeWebService allows to set parameters through SOAP (Request) Body and not through SOAP Header.
How can we set and send parameters in SOAP Header when using ODIInvokeWebService. Can we set this in a request file. Any workaround?
BTW is this a limitation in the tool. If yes, I am looking for a work around. I can setup a proxy service/servlet and re-route the request to the provider but I would like to know if there is a work that can be done easily through ODIInvokeWebService before I look for other options.
Appreciate your help.
Thank you.
-Muthu

Hi Muthu ,
This is not supported by the ODIInvokeWS Tool.
There are some ER logged against this and may be it will get implemented in ODI 11g
Sutirtha

No Receiver in SOAP header in sxmb_moni

Hi all
My scenario is using the HTTP sender channel.the url is like this:
http://xiserver:8000/sap/xi/adapter_plain?namespace=http%3A//my&interface=MI_Leo_HTTP_Sou_OB&service=ZBS_Leo_Http&party=&agency=&scheme=&QOS=EO&sap-user=*****&sap-password=****&sap-client=001&sap-language=EN
after i trigger the scenario, i got the message'status scheduled
and the info of SOAP Header in sxmb_moni as followed:
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Main xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsu="http://www.docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" versionMajor="003" versionMinor="000" SOAP:mustUnderstand="1" wsu:Id="wsuid-main-92ABE13F5C59AB7FE10000000A1551F7">
<SAP:MessageClass>ApplicationMessage</SAP:MessageClass>
<SAP:ProcessingMode>asynchronous</SAP:ProcessingMode>
<SAP:MessageId>7603ACFE-A4DB-5F48-8F6A-A9DFC3CB97CB</SAP:MessageId>
<SAP:TimeSent>2007-11-01T03:34:43Z</SAP:TimeSent>
- <SAP:Sender>
<SAP:Service>ZBS_Leo_Http</SAP:Service>
<SAP:Interface namespace="http://my">MI_Leo_HTTP_Sou_OB</SAP:Interface>
</SAP:Sender>
 <SAP:Interface namespace="http://my">MI_Leo_HTTP_Sou_OB</SAP:Interface>
</SAP:Main>
i think it's really wired, in the info, i couldn't find the receiver info, while my receiver determination is really ok.
the bold highlighted aboved should be like this:
<SAP:Receiver>
<SAP:Party agency="" scheme="" />
<SAP:Service>*******</SAP:Service>
<SAP:Interface namespace="****">*****</SAP:Interface>
<SAP:Mapping notRequired="X" />
</SAP:Receiver>
but it's wrong.how should solve this????
and i restarted the message, it became manual restart status, it didn't work
Please help me.
Thank you in advance.

it works now

Color space, gamma, and code value range data

Greetings!
I'm getting close to submitting my film for professional DCP creation. It's a ProRes 422 4096 by 1716, 2.39 - 1 file, created as a "master file" in a Premiere Pro CC export (the sequence being an "online" of sorts, built from SpeedGrade color-corrected DPX files).
The Guidelines for "Digital Cinema Source Delivery" require me to provide information about Color Space, Gamma, and Code Value Range Information (head vs full). Specifically, an order form asks for TRT, Color-Space, and Full or Head.
This is simply all Greek to me. I know my film looks gorgeous, and the rest of what I've told you, but that's the limit of my experience.
Can someone help me out? Specifics are preferred to broad strokes. Many thanks in advance.

This is probably too late now for you anyway but here is some extra information:
The "Digital Source Master" is the video footage before any D-Cinema formatting or encoding has been done.
It can be literally anything. The DCI specification did not specify this.
They did however specify exactly what the transcoded verison has to look like. The "D-Cinema Distribution Master" (16bit TIFF, XYZ)
So in other words, you need to tell your service provider:
The resolution, fileformat, frame rate and especially the colourspace that you used.
For example r709 for HD or any other RGB colourspace with applied gamma value (2.3 for example).

When encrypting a SOAP, does the AES key embedded in SOAP header?

I'm using Axis2 and Rampart to encrypt SOAP messages. I'm trying to understand the structure of encrypted SOAP message.
My current understanding is, the soap body is encrypted using AES-128, and the AES key is encrypted and embedded in the soap header, in <xenc:EncryptedKey> tag. Is that right? could someone confirm? (or point out my mistakes)
Here's a encrypted SOAP request
<?xml version='1.0' encoding='UTF-8'?>
<soapenv:Envelope
 xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
 xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
 <soapenv:Header>
 <wsse:Security
 xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
 soapenv:mustUnderstand="1">
 <xenc:EncryptedKey Id="EncKeyId-14111765">
 <xenc:EncryptionMethod
 Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" />
 <ds:KeyInfo
 xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 <wsse:SecurityTokenReference>
 <ds:X509Data>
 <ds:X509IssuerSerial>
 <ds:X509IssuerName>
 CN=Sample
 Service,OU=Rampart,O=Apache,L=Colombo,ST=Western,C=LK
 </ds:X509IssuerName>
 <ds:X509SerialNumber>
 1187603713
 </ds:X509SerialNumber>
 </ds:X509IssuerSerial>
 </ds:X509Data>
 </wsse:SecurityTokenReference>
 </ds:KeyInfo>
 <xenc:CipherData>
 <xenc:CipherValue>
 gobOw+cbBJ4YweQkl/fNP2gZe8N/ihy7LFWWPJsveM10N+XKvUKWSefHoQF27UiKc67KLv/fJ3pI+N8HMGRHL72bAuTdWhMa9VC8S60hiNQusfAI3k3WPJh3Byhkr0ZSvPvLOfGZzSa60jfDXaLP7EjiI6tYXZhLeu0GRhfkdCI=
 </xenc:CipherValue>
 </xenc:CipherData>
 <xenc:ReferenceList>
 <xenc:DataReference URI="#EncDataId-29705835" />
 </xenc:ReferenceList>
 </xenc:EncryptedKey>
 </wsse:Security>
 </soapenv:Header>
 <soapenv:Body>
 <xenc:EncryptedData Id="EncDataId-29705835"
 Type="http://www.w3.org/2001/04/xmlenc#Content">
 <xenc:EncryptionMethod
 Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
 <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 <wsse:SecurityTokenReference
 xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
 <wsse:Reference URI="#EncKeyId-14111765" />
 </wsse:SecurityTokenReference>
 </ds:KeyInfo>
 <xenc:CipherData>
 <xenc:CipherValue>
 1IpKX0sFxuCclnwy7dmhja3F6MrRONuE69QsbNwwKTRma38qfETHDZnU4eP3k+hWMmiHVk6saEKi
 QiyBFu++g6uNKFRzitWR2qj2xE+WvU4TTg0CgrCExKnbV3jnZ0dr2GEd6Wfw9LSrOj8CBsH4xxnv
 /p6uAJqLg9rpm99prwVCkzWpS6QZOmFXYZWJQ0qvyHp8Qa2maGo2Ovc9paewf8YCXniR+5qY5uXz
 arVR8xdfNQiB7QZm8wemfPZzFI5/f0GZBsEIWmrdM0KZYbpGwTi4hdELZ/GplXYhwZRUrvUYzFLD
 rf7iIVQ6whE70bLY
 </xenc:CipherValue>
 </xenc:CipherData>
 </xenc:EncryptedData>
 </soapenv:Body>
</soapenv:Envelope>Edited by: RenShao on Apr 7, 2008 5:30 PM

You can examine your soap message before sending by using the statement:
soapMessage.writeTo(System.out);
This way you can ensure that you are formatting the message like you think you are.

Meaning of SOAP Header element.

Hi Frnds,
Can you please tell me, in the moni, what is the significant use of -
>
Main, ReliableMessaging, HopList, RunTime, PerformanceHeader, Diagnostic, and Trace of the SOAP Header.
And, Manifest of the SOAP BODY.
Thanks,
Raj.

Hi,
Check the link for more detail..
[http://help.sap.com/saphelp_nw70/helpdata/EN/dc/c5223d78cb752de10000000a114084/content.htm]
Regards,
Prakasu.M

Timestamp and Nonce value in SOAP header

Similar Messages

Maybe you are looking for