Security in OSB

Question

Hi All,
I have a scenario where I am calling a webservice(which is protected with group ABC- using policy conditions in weblogic).I need to call that webservice from OSB.Intially I did like this:From the Service accounts, I passed static username and password from OSB BS service policies(I am passing user who is already is already present in ABC group.It works fine.
But, now I have to use to a java callout(this we are using for custom authentication--We are getting username and password dynamically from the java code...This user belongs to above ABC group).I am struck withthe part ,how can I handle this situation in OSB.I tried to use transport headers...but it doeesnt have option of ws:username and ws:password.How can I pass those security credentails to BS.
Please point me to the right direction.
Thanks in advance.

Answer 1

Depends on how the authentication is implemented in the target service. If the username/password are required as transport headers (if transport level authentication is configure) then you need to set the username/password in $outbout variable while calling the target service. If a username password token is required as part of WS-Security header then you need to assign a SOAP WS-Security username password token (use an XQuery to generate one) and assign it to $header variable while calling the target service.
In both scenarios you can use the username/password returned by the Java callout and set them in correct place depending on the authentication configured on target side.