Securing Proxy using Username TokenAuthentication

PRESETUP:

Setup all the requirements as in  setup the OSB server to work with OWSM file.

What is Username Token Policy?

The Securing a proxy service by Username Token authentication means  

that only authenticated users have access to services through the use of OWSM.

TO DO:

• Click on the OWSM_test_PS proxy service under OWSM_security_project_Jan8th. (select the Proxy service u want to apply this security.).Refer Creating Business and Proxy service in OSB

• Navigate to the Policy tab.

Enable From OWSM Policy Store.

• Click Service Level Policies, which will enable the Add button.
• Click Add and the OWSM Policy Configuration window will open.

• Select the oracle/wss_username_token_service_policy from the list of policies and click submit. 

• The Username Token policy will be displayed in the Policy tab of the proxy service.

• Update the proxy service.

We have successfully secured our proxy service using UsernameToken WS-Security SOAP headers to authenticate users.

Now Lets test it.

• Navigate to the proxy service (in Project Explorer, click on the project and then on the proxy folder) and click on the Launch Test Console icon (with the bug).

• Click Execute (the value passed in the ID does not have an effect)

• Click on execute.
• We get an error because we have not passed a username and password. 

• Click Back to specify the username and password.
• In the test console, scroll down until the Security area is visible.
• Enter osbtest_key into the Override Value field and click Execute.(Please refer setup the OSB server to work with OWSM file.)

• Click on execute now.It wont throw any error.It will work perfectly..

The test should now work and a valid response should be returned by the proxy

service. The test console also shows the SOAP header with the Username Token

necessary for the authentication.