SOAP receiver adapter with wsc SecurityContextToken

[Former Member]

Is there any possibility like for UsernameToken Profile to use the axis framework SOAP adapter or any other configuration based on ws-security and wsc by oasis spec and also pass the identifier dynamically?

Header should be extended e.g. by

...

<soapenv:Header>

<wsse:Security>

<wsc:SecurityContextToken>

<wsc:Identifier>some input here</wsc:Identifier>

</wsc:SecurityContextToken>

</wsse:Security>

</soapenv:Header>

...

[Former Member]

Hi Kargakis,

The same issue are discussed in this threads. Can you please take a look:

Regards.

---Satish

[Former Member]

username token is clear, asking for security context token

[Former Member]

Hi all,

has anyone experience with SecurityContextToken? Is it possible within PI SOAP (AXIS) receiver adapter?

Thanks for your help already,

Frederic.

[Former Member]

Georgios, Frédéric

Have you managed to implement the SecurityContextToken using AXIS adapter. Thanks.

[Former Member]

Hi Hari,

Answer for question even this is quite old thread: Yes, it is possible.

Actually it seems to be only way to do in manageable way (other solution is to create SOAP message with header +security segments in mapping what is not good approach).  I did this lately using SOAP Receiver (Http Axis).  Thread SOAP Receiver - UsernameTokenhttps://scn.sap.com/thread/1756414 was helpful (knowing what module parameters you need to fill in etc) .

[Former Member]

Hi Mika,

Thanks for taking the time to answer this. But it seems the thread you mentioned talks about how to implement usernametokens. I want to understand if we can create SecurityContextToken using AXIS adapter or any other way.

The below field needs to be sent in the SOAP header

      <c:SecurityContextToken u:Id="uuid-xxxxxxxxxxxxx1" xmlns:c="http://schemas.xmlsoap.org/ws/2005/02/sc">

        <c:Identifier>urn:uuid:xxxxxxxxxxxxx</c:Identifier>

      </c:SecurityContextToken>

This is a different mechanism of implementing security.

[zameerf]

Hi Hari,

Did you find a solution for handling SecurityContextToken scenario?

Would be good if you can document the solution here.

Regards,

Zameer

[Former Member]

Hi Zameer,

Yes, we managed to implement it but not via the AXIS adapter. I had to do this in a java mapping.