OC4J 10g ID Propagation Using SAML Token Sender Vouches with Message Protection WS-Security 1.0

Upgrading Oracle Web Services Manager Policies and OC4J Security Enviroments 13-15

13.2.8.1 OC4J 10g

Edit the deployment descriptors for the Web service and client, as described in the following sections. Web Service Client with sample data Define the x509-token, signature, and encrypt elements in the client deployment descriptor. For example: x509-token signature signature-methodRSA-SHA1signature-method tbs-elements tbs-element local-part=Body name-space=http:schemas.xmlsoap.orgsoapenvelope tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements add-timestamp created=true expiry=28800 signature encrypt recipient-key alias=orakey encryption-methodAES-128encryption-method keytransport-methodRSA-OAEP-MGF1Pkeytransport-method tbe-elements tbe-element local-part=Body name-space=http:schemas.xmlsoap.orgsoapenvelope mode=CONTENT tbe-elements encrypt Web Service with sample data Define the verify-x509-token, verify-signature, and decrypt elements in the service deployment descriptor. For example: verify-x509-token verify-signature tbs-elements tbs-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements verify-timestamp expiry=28800 created=true verify-signature decrypt tbe-elements tbe-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body mode=CONTENT tbe-elements decrypt

13.2.8.2 Oracle WSM 11g

Perform the following steps: 13-16 Oracle Fusion Middleware Upgrade Guide for Oracle SOA Suite, WebCenter, and ADF 1. Attach policies as follows: Client : oraclewss10_x509_token_with_message_protection_client_policy. Web service : oraclewss10_x509_token_with_message_protection_service_policy. For more information about attaching policies in Oracle Fusion Middleware 11g, see Attaching Policies to Web Services in Oracle Fusion Middleware Security and Administrator’s Guide for Web Services. 2. Leave the configuration set for message body signing and encryption. 3. Configure the Authentication and Identity Assertion provider.

13.2.9 Username token over SSL

The following sections describe how to implement username token over SSL, and compare the steps required in the OC4J 10g and Oracle WSM 11g environments.