SOA Suite 11g: Consuming web service which enforce security policies on their WSDL files by esentri

Concrete WSDL VersionThe basic principle behind a Service Oriented Architecture is to orchestrate functional building blocks, primarily web services, in order to achieve a solution which fulfills the given requirements. In order to create a robust solution using Oracle SOA Suite several best practices emerged, one being decoupling web services in order to overcome dependencies during server/composite startup. A general approach for achieving this best practice is to use abstract and concrete WSDLs in combination.

An example for a working reference definition within the composite could look like follows:

<reference name="FooBarService" ui:wsdlLocation="oramds:/apps/com/foo/v1/bar.wsdl">

  <interface.wsdl interface="http://foo.com/BarService#wsdl.interface(BarService)"/&gt;

  <binding.ws port="http://foo.com/BarService#wsdl.endpoint(BarService/FooBarEndpoint)&quot;

    soapVersion="1.1"

    location="http://foo.com:7001/soa-infra/services/foo/bar/FooBarEndpoint?WSDL"&gt;

  </binding.ws>

</reference>

On a recent project we ran into some problems while implementing this best practice as some web services we had to consume not only protected their operations but also their WSDLs using basic authentication web security. Although we were able to access the operations by providing the security credentials within WebLogic Server using the Credential Store Framework (CSF), the solution never managed to successfully access the secured WSDL files.

After trying several approaches to overcome this problem, we implemented a workaround by storing an abstract WSDL within the shared MDS project as well as a concrete WSDL within the composite project in order to access the affected web services. We stored the concrete WSDLs within a wsdl folder in the project. Read the complete article here.

SOA & BPM Partner Community

For regular information on Oracle SOA Suite become a member in the SOA & BPM Partner Community for registration please visit www.oracle.com/goto/emea/soa (OPN account required) If you need support with your account please contact the Oracle Partner Business Center.

Blog Twitter LinkedIn image[7][2][2][2] Facebook clip_image002[8][4][2][2][2] Wiki Mix Forum

About Jürgen Kress
As a middleware expert Jürgen works at Oracle EMEA Alliances and Channels, responsible for Oracle’s EMEA Fusion Middleware partner business. He is the founder of the Oracle SOA & BPM and the WebLogic Partner Communities and the global Oracle Partner Advisory Councils. With more than 5000 members from all over the world the Middleware Partner Community is the most successful and active community at Oracle. Jürgen manages the community with monthly newsletters, webcasts and conferences. He hosts his annual Fusion Middleware Partner Community Forums and the Fusion Middleware Summer Camps, where more than 200 partners get product updates, roadmap insights and hands-on trainings. Supplemented by many web 2.0 tools like twitter, discussion forums, online communities, blogs and wikis. For the SOA & Cloud Symposium by Thomas Erl, Jürgen is a member of the steering board. He is also a frequent speaker at conferences like the SOA & BPM Integration Days, JAX, UKOUG, OUGN, or OOP.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: