WSDL for IdM Web Service

The IdM doco states:
"Identity Manager Web services are accessed using SOAP messages for HTTP. Identity Manager supports both versions of the OASIS standard for communication with provisioning systems; the Service Provisioning Markup Language (SPML) � versions1.0 and 2.0."
I would like to create a standard Web Services Client with an IDE like Netbeans. This entails obtaining the WSDL.
Does anyone know if this exists?
There is one for the Password Rest Web Service, but not the SPML interface.
Thanks

There seems to be a sample WSDL defined in the SPML 1.0 bindings document on openspml.org at the following URL:
http://www.oasis-open.org/committees/download.php/2394/cs-pstc-spml-bindings-1.0.pdf
I didn't check the new SPML 2.0 spec to see if it includes a WSDL you could use but I think 2.0 is only available in IdM 7.0.
Hope this helps.

Similar Messages

  • Getting complete WSDL for the web services created in J2EE

    Hi,
    I have created a web service using Netweaver developer studio for a J2EE project (complete EJB, WEB and Appln Project) similar to CAR rental application.
    I also have tested the web service in web service perspective and it is working fine. Now i want to call this web service from XI. Therefore i need the WSDL for the same. The testing screen also gives the WSDL for the web service. But it has got number of links inside in the forms of import.
    Editing all those documents and forming the complete wSDL is very difficult..
    How do i do it??
    Abhijeet

    Hi,
    When I opened the wsdl it has number has a wsdl:import location tag..which refers to binding.
    when opened this import location we have one more import location for porttypes.
    When combined all thhree e.g. service, binding and porttype we get the complete WSDL which i could comofortably import in XI and further process.
    This way i coudl succesfully call a web service from XI.
    I used Stylus studio for editing WSDL.
    Thanx

  • WSDL for Provided Web Service does not resolve in IE

    Hi,
    After successfully providing a Web Service in FSCM 9/PT 8.49, I copied the generated WSDL URL in IE I was unable to view the WSDL. In-fact I cannot view any of the OOB WSDL's using the URL which PS generates after successfully posting it to the WSDL repository.
    Any thoughts Please.
    Thank You
    Prashant

    Hi Nicolas,
    The URL that i am currently using is "http://localhost:8280/PSIGW/PeopleSoftServiceListeningConnector/SALES_ORDER_LOAD.1.wsdl
    And when I paste this in IE I get the following response...
    <![CDATA[ Unable to find a Routing corresponding to the incoming request message.  ]]>
    Status Code 20 & MessageID - 505 ... I could not paste the actual SOAP Fault message, as the Rich Text format was not resolving it correctly...
    And on the Web Server window it says "[Fatal Error] :1:1: Content is not allowed in prolog.
    I did lookup this particular error message for Weblogic and what I could make out is that the XML doc being provided has additional BOM Objects which need to stripped..
    Below is the snippet from the +<strong
    *~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*
    com.peoplesoft.pt.integrationgateway.common.GeneralFrameworkException
    at com.peoplesoft.pt.integrationgateway.listeningconnector.PeopleSoftServiceListeningConnector.service(PeopleSoftServiceListeningConnector.java:361)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:225)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:127)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
    at com.peoplesoft.pt.integrationgateway.common.IBFilter.doFilter(IBFilter.java:69)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3212)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:1983)
    at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1890)
    at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1344)
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Message-ID: &lt;5852381.1229014948625.JavaMail.CipherXP@cipher-b194ccb8&gt;
    Date: Thu, 11 Dec 2008 22:32:28 +0530 (IST)
    Mime-Version: 1.0
    Content-Type: multipart/related;
    boundary="----=_Part_40_130942.1229014948609"
    Content-ID: PeopleSoft-Integration-Broker-Internal-Mime-Message
    PeopleSoft-ToolsRelease: 8.48
    ------=_Part_40_130942.1229014948609
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    Content-Disposition: inline
    Content-ID: IBInfo
    &lt;?xml version="1.0"?&gt;&lt;IBInfo&gt;&lt;ExternalOperationName&gt;&lt;![CDATA[GetWSDL]]&gt;&lt;/ExternalOperationName&gt;&lt;HttpSession&gt;&lt;SessionID&gt;&lt;![CDATA[]]&gt;&lt;/SessionID&gt;&lt;/HttpSession&gt;&lt;From&gt;&lt;WSA-ReplyTo&gt;&lt;![CDATA[]]&gt;&lt;/WSA-ReplyTo&gt;&lt;WSA-MessageID&gt;&lt;![CDATA[]]&gt;&lt;/WSA-MessageID&gt;&lt;/From&gt;&lt;QStrArgs&gt;&lt;QStrArg&gt;&lt;Name&gt;&lt;![CDATA[wsdl]]&gt;&lt;/Name&gt;&lt;Value&gt;&lt;![CDATA[SALES_ORDER_LOAD.1]]&gt;&lt;/Value&gt;&lt;/QStrArg&gt;&lt;/QStrArgs&gt;&lt;ContentSections&gt;&lt;ContentSection&gt;&lt;ID&gt;ContentSection0&lt;/ID&gt;&lt;NonRepudiation&gt;N&lt;/NonRepudiation&gt;&lt;Headers&gt;&lt;Accept&gt;&lt;![CDATA[image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-shockwave-flash, */*]]&gt;&lt;/Accept&gt;&lt;Accept-Language&gt;&lt;![CDATA[en-us]]&gt;&lt;/Accept-Language&gt;&lt;UA-CPU&gt;&lt;![CDATA[x86]]&gt;&lt;/UA-CPU&gt;&lt;Accept-Encoding&gt;&lt;![CDATA[gzip, deflate]]&gt;&lt;/Accept-Encoding&gt;&lt;User-Agent&gt;&lt;![CDATA[Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)]]&gt;&lt;/User-Agent&gt;&lt;Host&gt;&lt;![CDATA[localhost:8280]]&gt;&lt;/Host&gt;&lt;Connection&gt;&lt;![CDATA[Keep-Alive]]&gt;&lt;/Connection&gt;&lt;/Headers&gt;&lt;/ContentSection&gt;&lt;/ContentSections&gt;&lt;IBProfileInformation&gt;&lt;AppServer&gt;&lt;TransformInbound&gt;0&lt;/TransformInbound&gt;&lt;OnRoutePeopleCode&gt;0&lt;/OnRoutePeopleCode&gt;&lt;OnRequestPeopleCode&gt;0&lt;/OnRequestPeopleCode&gt;&lt;TransformOutbound&gt;0&lt;/TransformOutbound&gt;&lt;DataBase&gt;0&lt;/DataBase&gt;&lt;AppServerSendTime&gt;0&lt;/AppServerSendTime&gt;&lt;AppServerRecvTime&gt;0&lt;/AppServerRecvTime&gt;&lt;/AppServer&gt;&lt;GatewayRequest&gt;&lt;Connector&gt;0&lt;/Connector&gt;&lt;Transform&gt;0&lt;/Transform&gt;&lt;GatewayTime&gt;0&lt;/GatewayTime&gt;&lt;/GatewayRequest&gt;&lt;GatewayResponse&gt;&lt;Transform&gt;0&lt;/Transform&gt;&lt;GatewayTime&gt;0&lt;/GatewayTime&gt;&lt;/GatewayResponse&gt;&lt;/IBProfileInformation&gt;&lt;AttachmentSection ResponseAsAttachment="N"&gt;&lt;/AttachmentSection&gt;&lt;/IBInfo&gt;
    ------=_Part_40_130942.1229014948609
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    Content-Disposition: inline
    Content-ID: ContentSection0
    &lt;?xml version="1.0"?&gt;
    ------=_Part_40_130942.1229014948609--
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Message-ID: &lt;12927846.1229014948625.JavaMail.CipherXP@cipher-b194ccb8&gt;
    Date: Thu, 11 Dec 2008 22:32:28 +0530 (IST)
    Mime-Version: 1.0
    Content-Type: multipart/related; boundary="Integration_Server_MIME_Boundary"
    Content-ID: PeopleSoft-Integration-Broker-Internal-Mime-Message
    PeopleSoft-ToolsRelease: 8.48
    --Integration_Server_MIME_Boundary
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    Content-Disposition: inline
    Content-ID: IBInfo
    &lt;?xml version="1.0"?&gt;&lt;IBInfo&gt;&lt;Status&gt;&lt;StatusCode&gt;20&lt;/StatusCode&gt;&lt;MsgSet&gt;158&lt;/MsgSet&gt;&lt;MsgID&gt;505&lt;/MsgID&gt;&lt;DefaultMsg&gt;Unable to find a Routing corresponding to the incoming request message.&lt;/DefaultMsg&gt;&lt;/Status&gt;&lt;AttachmentSection ResponseAsAttachment="N"&gt;&lt;/AttachmentSection&gt;&lt;/IBInfo&gt;
    Integration_Server_MIME_Boundary
    Thank You for your help
    Prashant

  • Is there a WSDL for this Web Service

    I am new to this Web Service Toolkit and am wondering if there is a WSDL for it. If so an example URL would be great.

    If you're here asking about the Mac OS X Server Podcast Producer, that's part of Mac OS X Server, and Mac OS X Server is a feature-upgrade to, and does cost more than, the more familiar Mac OS X (client) software package.  You'll also need sufficient network bandwidth for whatever you're planning here, particularly if you're going to be distributing this podcast material directly from your Mac OS X Server box.
    If you're here asking about creating podcasts using Garageband or other tools, then yes, there can be fees associated with those products.  Garageband is part of the iLife tools, and a version of that is installed with new Mac systems, though upgrades do cost money.  (And get yourself a good external cartioid condensor or equivalent microphone; the audio quality from the built-in mikes is very poor.)
    If you're here asking about the podcast downloads using iTunes and accessing the Apple servers for the podcasts you can download - and specifically about publishing the podcasts - then I believe those are free (at least for non-commercial podcasts), but you'll want to check the iTunes Making a Podcast document for details
    If I've not guessed at your particular goal(s) here (your question is unfortunately somewhat ambiguous), please consider providing a little more background on what you're up to and what problem(s) you're solving.

  • Problem using WSDL from SAP in IBM's RAD for generating web service client

    When importing a WSDL from the ABAP stack on a SAP 6.40 system into IBM's RAD tool for generating a web service client there are errors with the soap fault classes that get generated.  The WSDL declares the types for the faults with WebServiceName.RfcException and these have elements of name, text, and message.  When the tools see this in the WSDL they generate classes that extend the Java exeception class and this causes an error because the "message" name conflicts with the standard java exception message.  Has anyone else ran into this problem?  It seems like a basic problem many java tools for generating web service client proxies would have because the soap faults get turned into java exceptions.  This name conflict of the java exception with the WSDL fault definition means that code always needs to be adjusted and cannot simply use the classes that are generated from the WSDL.  Anyone run across this or a similar problem in the java environment using the SAP WSDL?
    Aaron

    Hi,
    Hello again .
    Have you tried your service using soapui ?
    You can use your WSDL as input .
    In order to eliminate eclipse problem try this service:(I just did)
    http://www.oorsprong.org/websamples.countryinfo/CountryInfoService.wso?WSDL
    Regards.
    package main;
    import java.io.FileInputStream;
    import java.rmi.RemoteException;
    import java.util.Properties;
    import org.oorsprong.www.websamples_countryinfo.CountryInfoServiceSoapType;
    import org.oorsprong.www.websamples_countryinfo.CountryInfoServiceSoapTypeProxy;
    import org.oorsprong.www.websamples_countryinfo.TCountryCodeAndName;
    public class Main {
    public static void main(String[] args) {
      try {
       final Properties properties = new Properties();
       properties.load(new FileInputStream("properties.ini"));
       System.getProperties().putAll(properties);
      } catch (final Exception exception) {
       exception.printStackTrace();
      new Main();
    public Main() {
      try {
       final CountryInfoServiceSoapType infoServiceSoapType = new CountryInfoServiceSoapTypeProxy();
       final TCountryCodeAndName[] tCountryCodeAndNames = infoServiceSoapType.listOfCountryNamesByName();
       for (final TCountryCodeAndName tCountryCodeAndName : tCountryCodeAndNames) {
        System.out.println(tCountryCodeAndName.getSName());
      } catch (final RemoteException exception) {
       exception.printStackTrace();

  • Include xml schema in the WSDL of the web service

    Hi,
    I have a bpel process where I want to call several web service, so therefore the web services should reference the same xsd schema. I use JDeveloper and Oracle PM 10.1.3.3.0.
    I have a problem with including the schema in the wsdl of the web service, and I receive an error at deploying the web service.
    For including the schema I tried, things like:
    <types>
    <xsd:include schemaLocation="\C:/genschema.xsd"/>
    </types>
    Error compiling :C:\orabpel\bpel\system\appserver\oc4j\j2ee\home\applications\BuecherApp-LagerService-WS\WebServices: Error instantiating compiler: Web service artifact generation failed:oracle.j2ee.ws.common.tools.api.WsdlValidationException: model error: element "{http://lagerservice/types/}pruefeBuecherAufLagerElement" not found.
    or
    <types>
    <schema xmlns="http://www.w3.org/2001/XMLSchema">
         <import namespace="http://lagerservice/types/"
    schemaLocation="genschema.xsd" />
         </schema>
    </types>
    Error instantiating compiler: Web service artifact generation failed:java.lang.InstantiationException: IO Error parsing imports in C:\orabpel\bpel\system\appserver\oc4j\j2ee\home\application-deployments\BuecherApp-LagerService-WS\WebServices\server-wsdl\LagerService.wsdl : Unable to find/read file WEB-INF/wsdl/genschema.xsd
    the file is in the required directory WEB-INF/wsdl, and also the current directory.
    Can anyone help please?
    Ela

    ... and here is the solution:
    <types>
    <schema xmlns="http://www.w3.org/2001/XMLSchema">
         <import namespace="http://lagerservice/" schemaLocation="file:///c:/genschema.xsd" />
         </schema>
    </types>

  • Web-service client for legacy web service

    I currently access a legacy server (Lotus Domino 7) via CORBA. I thought a web service (my second) would be faster, but a whole day's research has uncovered only obsolete or trivial examples.
    The WSDL generated by the server is rpc/encoded so wsimport cannot generate the necessary "artifacts" for a web service client.
    The web service is simple: it accepts two java.lang.Strings, and returns a java.lang.String of XML. The "dynamic proxy" approach from 1.4.2 seems to have disappeared; I was hoping that approach would let me just hand-code a single "artifact" - an SEI based on the method information in the WSDL.
    1) What classes in JAX-WS will let my web service client communicate with rpc?
    2) With such a simple signature, do I need any other "artifacts" beyond an SEI?
    Thanks for any help!

    In case anyone's search leads them here, I've posted the solution at:
    *[http://www.pby.com/general.nsf/webarticles/dominowebservice01]*
    It is an exhaustive article (not "Hello World"!) that goes through several versions of the web service and client - hopefully explaining all* pieces of the puzzle:
    ~ web service code,
    ~ WSDLs
    ~ schema
    ~ thoroughly-documented clients that do and do not use JAXB
    ~ ... that use generated artifacts
    ~ ... that customize existing POJOs
    ~ the SOAP messages generated in each direction
    ~ the necessary JAXB annotations
    ~ explanations of how the code works
    ~ explanations of how namespaces affect the code
    ~ on and on and on...
    My constant goal was to write an uncomplicated solution that uses as few artifacts (two) and annotations as possible. The end result is a small, fast JAX-WS 2.0 client that uses JAXB to invoke and consume a secured Domino 7 (1.4.2 JVM + AXIS) web service, using RPC/literal SOAP messages.

  • "invalid web service URL" error for create web service system

    Hi.
    I want to call web service in visual composer and try to create Web Service definition.
    When I push create button in visual composer, I got "invalid web service URL" error.
    My web service is located in SAP ABAP System and I can check WSDL URL in web service homepage.
    (http://mycompany.com:8000/sap/bc/srt/rfc/sap/ZTEST?sap-client=500&wsdl=1.1)
    Any ideas for this error ?
    Regards, Arnold.

    Hi
    Please can you create the web service in the portal as a portal system, this will work and you will be able to see the service in Visual Composer.
    Jarrod Williams

  • IDM Web Services

    Hello, My name is Jo�o Rocha, and i'm from portugal.
    I have an intranet develloped in asp.net C# tecnologie and at this moment on my universitie we have installed and IDM 7.1 update 1.
    I need to place in my intranet a page to the users can change their passwords.
    I need to access the web services interface on IDM to made this.
    Can I access this from Visual studio? and how can I access this interface? There is a better way to do this?
    Sorry about my bad english.

    Hi Alpesh,
    I understand that CUP installation and configuration is necessary to call
    the provisioning Web Services, like SAPGRC_AC_IDM_SUBMITREQUEST or SAPGRC_AC_IDM_RISKANALYSIS. Generally, all the Web Services that requires
    a user provisioning action.
    But for the Web Services SAPGRC_AC_IDM_SELECTAPPLICATION and SAPGRC_AC_IDM_SEARCHROLES there is no action required from CUP, it is
    performed by GRC Access Control. The systems and roles are imported on AC
    not in CUP (or on an IDM system if you want).
    Are you really sure about the necessity of CUP configuration to run these
    two Web Services?
    At the SAP GRC Access Control 5.3 Configuration Guide I don't see anything
    about this restriction.
    Thanks a lot,
    toni

  • Best Practice for Securing Web Services in the BPEL Workflow

    What is the best practice for securing web services which are part of a larger service (a business process) and are defined through BPEL?
    They are all deployed on the same oracle application server.
    Defining agent for each?
    Gateway for all?
    BPEL security extension?
    The top level service that is defined as business process is secure itself through OWSM and username and passwords, but what is the best practice for security establishment for each low level services?
    Regards
    Farbod

    It doesnt matter whether the service is invoked as part of your larger process or not, if it is performing any business critical operation then it should be secured.
    The idea of SOA / designing services is to have the services available so that it can be orchestrated as part of any other business process.
    Today you may have secured your parent services and tomorrow you could come up with a new service which may use one of the existing lower level services.
    If all the services are in one Application server you can make the configuration/development environment lot easier by securing them using the Gateway.
    Typical probelm with any gateway architecture is that the service is available without any security enforcement when accessed directly.
    You can enforce rules at your network layer to allow access to the App server only from Gateway.
    When you have the liberty to use OWSM or any other WS-Security products, i would stay away from any extensions. Two things to consider
    The next BPEL developer in your project may not be aware of Security extensions
    Centralizing Security enforcement will make your development and security operations as loosely coupled and addresses scalability.
    Thanks
    Ram

  • What are the different messages that OCOD may return for a web service requ

    Hi,
    Please give me feedback on the questions below, concerning the limitations of web service, and messages which may return.
    1) What are the different messages that OCOD may return for a web service request? I need all the messages of all the scenarios which OCOD can meet, for example:
    - If the file is rejected (Error message)
    - If the file is accepted (to clarify that the records have been created)
    - if the application is unavailable (maintenance or web service is down)
    2) How many request can we send simultaneously, and how many records we can make per second?
    Best Regard,

    Have a look here Jquery slideshow tutorial for beginners | WEBTUTS

  • Mapping input values for a web service connection to a range of cells

    I've created a web service connection in Xcelsius data manager. My web service requires an array of integer as input parameter. How do I map input values for a web service connection to read from a range of cells in the spreadsheet, e.g. $A$2:$A$20, in similar way of mapping output values to write to a range of cells in the spreadsheet?
    For output values of the web service, I can specify to map the output values to write to a range of cells. However, it doesn't seem to work for reading the input values.
    I can map input values for each node to a single cell, e.g. $A$2, in the spreadsheet. However, when I set the "Read From" field to a range of cells, e.g. $A$2:$A$20, it only reads in the first value in the range.
    Is there any way that we can do this mapping for input values as we do for output values?
    Your assistance is very much appreciated.
    Regards,
    Van

    Van,
    There is a workaround for that...
    Example:
    My Webservice accepts input data range in a specific format with " :" symbol, i.e. 072008:082008
    Now what i do is
    A1 = 072008
    A2 = 082008
    A3 = CONCATENATE(A1,":",A2)
    so A3 = 072008:082008
    Now i map the input value in web service to cell A3
    P.S have 2 input box components and map it to cells A1 and A2, i.e you are giving users an  option to enter the range of values...then web service will capture the range and refreshes data with the range of values user entered.
    hope this helps..
    -Anil

  • Details for 'Is Web service security available?'

    Hi i am working on scenario rfc to webservice.Its as secued webserivce i need to do ssl configuration.
    In component monitoring..for the integration engine its in yellow...
    Details for 'Is Web service security available?'
    Communication error Proxy calls on the sender or receiver side are not permitted on the IS (client)
    can any one please help me out..
    Thanks
    sriram

    I have already installed certificates on the j2ee engine & i have given the paramaters for keystore entry & keystore value.Still i have the same error
    In component monitoring
    For integration engine
    Details for 'Is Web service security available?'
    Communication error Proxy calls on the sender or receiver side are not permitted on the IS (client) 
    In message monitoring
    Audit Log for Message: f614df00-e9e0-11da-95ef-0004ac577b32
    Time Stamp Status Description
    2006-05-22 15:18:58 Success The message was successfully received by the messaging system. Profile: XI URL: http://saptst01:51000/MessagingSystem/receive/AFW/XI
    2006-05-22 15:18:58 Success Using connection AFW. Trying to put the message into the request queue.
    2006-05-22 15:18:58 Success Message successfully put into the queue.
    2006-05-22 15:18:58 Success The message was successfully retrieved from the request queue.
    2006-05-22 15:18:58 Success The message status set to DLNG.
    2006-05-22 15:18:58 Success Delivering to channel: ZCH_VERISIGNPPGR
    2006-05-22 15:18:58 Success SOAP: request message entering the adapter
    2006-05-22 15:18:58 Success SOAP: call failed
    2006-05-22 15:18:58 Error SOAP: error occured: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: illegal parameter
    2006-05-22 15:18:58 Error Exception caught by adapter framework: Peer sent alert: Alert Fatal: illegal parameter
    Can any one please help me out.
    Thanks
    sriram

  • Using Identity Management for Securing Web Services

    My goal is to associate my services with an Oracle Internet Directory. I made some attempts to set up SAML authentication for the web services, but it didn't have the right outcome.
    (My identity management server and OID is up and running and I have successfully made authentication modules for other web applications)
    Here is what I did:
    1. I wrote a simple java file, used jdeveloper tools to create and deploy it as a web service to OC4J. I associated an identity management server with this service through OC4J web tools as security provider.
    2. I made a data control for the web service and put it in an ADF application . (client)
    3. I deployed the client project(2) to OC4J.
    I could use the web service through the page.
    Then
    I secured the webservice to expect SAML for authentication.
    Surprisingly, the client could still communicate with the webservice, Why? Shouldn't it have rejected the request because of the problem in SAML token? (The proxy and the data control were not secured, and didn't provide any SAML tokens)
    4.
    I added login page to my client project (through ADF security wizard). It used idenity management for authentication successfully. login process completes and web service data control is displayed.
    5. I want the authentication information to be propagated through the page so that the web service receives the data and uses Identity Management.
    I know I should add <property name="oracle.security.wss.propagate.identity" value ="true"/>
    to one of the configuration files, but don't know where exactly.
    Best Regards,
    Farbod

    It doesnt matter whether the service is invoked as part of your larger process or not, if it is performing any business critical operation then it should be secured.
    The idea of SOA / designing services is to have the services available so that it can be orchestrated as part of any other business process.
    Today you may have secured your parent services and tomorrow you could come up with a new service which may use one of the existing lower level services.
    If all the services are in one Application server you can make the configuration/development environment lot easier by securing them using the Gateway.
    Typical probelm with any gateway architecture is that the service is available without any security enforcement when accessed directly.
    You can enforce rules at your network layer to allow access to the App server only from Gateway.
    When you have the liberty to use OWSM or any other WS-Security products, i would stay away from any extensions. Two things to consider
    The next BPEL developer in your project may not be aware of Security extensions
    Centralizing Security enforcement will make your development and security operations as loosely coupled and addresses scalability.
    Thanks
    Ram

  • Best practice for consuming web services

    Hi
    we are consuming web service in orchestration by "Add Generated Item".By using this option it creates 1 orch,1xsd file and some bindings.
    we have different projects for schemas,maps and orchestration under our solution in visual studio.
    Now i need to know that what will be the best practice for consuming web service in orchestration i mean in which project should i use "add generated item" (in orchstration project or in schemas project) coz it generates both 1 orch and 1
    schema.
    thanks

    From a service orientation perspective you should abstract the service artifacts from the other artifacts. Otherwise it will be very difficult to update the service interface without affecting the other artifacts. For example you don't want to have to redeply
    your entire application if only one field changes in the service you consume.
    So I typically generate the items, remove the unnecessary stuff, and put them in a separate project.
    Depending on the control you have over the services you want to consume, it would even be better to create another layer of abstraction. By that I mean create your own interface (schema) and map that one to the one the service exposes. This basically
    is only necessary if you consume external services that are beyond your control. By abstracting the interface it exposes, you limit the impact of changes of that interface on the rest of your system. All changes are abstracted behind your own interface.
    If you consume internal services, you can probably control the way the interface is defined. In a service oriented world all internal services expose a well known interface, based on the domain objects you have within your organisation.
    Jean-Paul Smit | Didago IT Consultancy
    Blog |
    Twitter | LinkedIn
    MCTS BizTalk 2006/2010 + Certified SOA Architect
    Please indicate "Mark as Answer" if this post has answered the question.

Maybe you are looking for

  • How to skip the Analysis level in the workflow for manual investigation?

    Hi Experts, My requirement is to bypass the Analysis level for manual investigation in the workflow template number WS15100038. I tried to set the 'skip first decision step?' step as true to bypass the analyst level by setting the container element 

  • (Enter the text shown) why this showing in firefox persona sign in, there is no text???

    Enter the text shown why this showing in Firefox persona sign in

  • Split  text into  number and  text

    Hi , My problem is something like this....." 5 feet 6 inch ". This is a single string(varchar). since i cannot calculate value (6*5) here .i need to make it taking from database separate. And later calculate value.Is there any possibility throught wh

  • FlashPlayer is not accepted

    Iinstalled the flash player correctly on my macbook (verified by apple people in the apple shop), but it isn't accepted . Many sites don't work, no utube, no t-online etc. It worked for one day, and then , again, was rejected . What can be done?

  • Method binding

    hi, i was trying to dynamically build a number of link buttons and associate them all using method binding to an action and this action is supposed to take as argument an ActionEvent object to detect what component triggered the action but when i run