OC4J 10g Anonymous Authentication with Message Integrity WS-Security 1.0

Upgrading Oracle Web Services Manager Policies and OC4J Security Enviroments 13-11 encrypt Web Service with sample data Define the verify-username-token, verify-signature, and decrypt elements in the service deployment descriptor. For example: verify-username-token password-type=PLAINTEXT require-nonce=false require-created=false verify-signature tbs-elements tbs-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements verify-timestamp expiry=28800 created=true verify-signature decrypt tbe-elements tbe-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body mode=CONTENT tbe-elements decrypt

13.2.5.2 Oracle WSM 11g

Perform the following steps: 1. Attach policies as follows: Client : oraclewss10_username_token_with_message_protection_client_policy. Web service : oraclewss10_username_token_with_message_protection_service_ policy. For more information about attaching policies in Oracle Fusion Middleware 11g, see Attaching Policies to Web Services in Oracle Fusion Middleware Security and Administrator’s Guide for Web Services. 2. Leave the configuration set for message body signing and encryption. 3. Configure the Authentication and Identity Assertion provider.

13.2.6 ID Propagation Using SAML Token Sender Vouches with Message Protection WS-Security 1.0

The following sections describe how to implement ID propagation using SAML token sender vouches with message protection that conforms to the WS-Security 1.0 standard, and compare the steps required in the OC4J 10g and Oracle WSM 11g environments. For more information about the deployment descriptor elements, see OracleAS Web Services Security Schema in Oracle Application Server Web Services Security Guide 10g 10.1.3.1.0 at: http:www.oracle.comtechnologydocumentation 13-12 Oracle Fusion Middleware Upgrade Guide for Oracle SOA Suite, WebCenter, and ADF

13.2.6.1 OC4J 10g

Edit the deployment descriptors for the Web service and client, as described in the following sections. Web Service Client with sample data Define the saml-token, signature, and encrypt elements in the client deployment descriptor. For example: saml-token issuer-name=www.oracle.com name=weblogic name-format=UNSPECIFIED subject-confirmation-method confirmation-methodSENDER-VOUCHESconfirmation-method subject-confirmation-method saml-token signature signature-methodRSA-SHA1signature-method tbs-elements tbs-element local-part=Body name-space=http:schemas.xmlsoap.orgsoapenvelope tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements add-timestamp created=true expiry=28800 signature encrypt recipient-key alias=orakey encryption-methodAES-128encryption-method keytransport-methodRSA-OAEP-MGF1Pkeytransport-method tbe-elements tbe-element local-part=Body name-space= http:schemas.xmlsoap.orgsoapenvelope mode=CONTENT tbe-elements encrypt Web Service with sample data Define the verify-saml-token, verify-signature, and decrypt elements in the service deployment descriptor. For example: verify-saml-token subject-confirmation-methods confirmation-methodSENDER-VOUCHESconfirmation-method subject-confirmation-methods verify-saml-token verify-signature tbs-elements tbs-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements verify-timestamp expiry=28800 created=true verify-signature decrypt tbe-elements