What Default Policies are Attached to a Service? How Can the Global Policy be Overridden for an Individual Service?

26-8 Developers Guide for Oracle Application Integration Architecture Foundation Pack ■ Example: AIA_ABCS_WSClientPolicySet

26.5.2 Naming Conventions for Overriding Config Params

Naming convention for config param - csf key ■ AIA_APPSHORTNAME_ServiceName_PortTypeName – APPSHORTNAME: Application short name as defined in the service registry – ServiceName: Value of the attribute name of the element service in the WSDL of the External Web Service – PortTypeName: Value of the attribute name of the element portType in the WSDL of the External Web Service 26.6 How Does AIA Foundation Pack Help in Securing AIA Services? AIA Foundation Pack automatically: ■ Creates the recommended global policy sets ■ Attaches the local policies for the composites when required. This section includes the following topics: ■ Section 26.6.1, What Default Policies are Attached to a Service? ■ Section 26.6.2, How Can the Global Policy be Overridden for an Individual Service? ■ Section 26.6.3, AIA Security Configuration Properties 26.6.1 What Default Policies are Attached to a Service? The deployment of global policies is handled during the Foundation Pack installation. A set of global services as well as client policies are attached to the WLS domain at the time of Foundation Pack installation. The result is automatic securing of all services matching the pattern deployed on that server. Foundation Pack installer creates both service-specific and client-specific global policy sets for the composite name patterns: ■ ABCS ■ EBS ■ EBF ■ Adapter ■ Producer ■ Consumer Foundation Pack Installer creates the following policy sets: ■ Global PolicySets attached to Composite Services – AIA_ABCS_WSServicePolicySet – AIA_EBS_WSServicePolicySet – AIA_EBF_WSServicePolicySet – AIA_Adapter_WSServicePolicySet Working with Security 26-9 – AIA_Consumer_WSServicePolicySet – AIA_Producer_WSServicePolicySet ■ Global PolicySets attached to Composite References – AIA_ABCS_WSClientPolicySet – AIA_EBS_WSClientPolicySet – AIA_EBF_WSClientPolicySet – AIA_Adapter_WSClientPolicySet – AIA_Consumer_WSClientPolicySet – AIA_Producer_WSClientPolicySet 26.6.2 How Can the Global Policy be Overridden for an Individual Service? Composites that must interact with protected application services needing a different security policy, have local policies attached, overriding the global polices at the time of deployment. Similarly, the NoClientAuthenticationPolicy is attached, overriding the global policy sets for composites that must interact with non-protected application services. The AIA Deployment Driver provides support, in general, for attaching any overriding local security policy, but supports configuration-overriding only for saml-token and username-token client policies. When a different client local policy is used, the AIA Deployment Driver attaches the policy but its configuration is a manual task. The structure of the XML file is shown in Example 26–3 .

26.6.3 AIA Security Configuration Properties