WAS v8.5 > Develop applications > Develop web services - Security (WS-Security) > Configure Web Services Security during application assemblyConfigure XML basic authentication for v5.x web services with an assembly tool
With the basic authentication (BasicAuth) authentication method, the request sender generates a BasicAuth security token using a callback handler. The request receiver retrieves the BasicAuth security token from the SOAP message and validates it using a Java™ Authentication and Authorization Service (JAAS) login module. Trust is established using user name and password validation.
Subtopics
- Secure web services for v5.x applications using basic authentication
With the basic authentication (BasicAuth) authentication method, the request sender generates a BasicAuth security token using a callback handler. The request receiver retrieves the BasicAuth security token from the SOAP message and validates it using a Java Authentication and Authorization Service (JAAS) login module. Trust is established using user name and password validation.- Configure the client for basic authentication: specifying the method
Basic authentication (BasicAuth) refers to the user ID and password of a valid user in the registry of the target server. BasicAuth information can be collected in many ways, including through an dmgr console prompt, a standard in (Stdin) prompt, or specified in the bindings that prevents user interaction.- Configure the client for basic authentication: collecting the authentication information
The basic authentication (BasicAuth) method refers to the user ID and the password of a valid user in the registry of the target server. Collection of BasicAuth information can occur in many ways including through a user interface prompt, a standard in (Stdin) prompt, or specified in the bindings, which prevents user interaction.- Configure the server to handle basic authentication information
Basic authentication (BasicAuth) refers to the user ID and the password of a valid user in the registry of the target server. After a request is received containing basic authentication information, the server needs to log in to form a credential. The credential is used for authorization.- Configure the server to validate basic authentication information
Basic authentication (BasicAuth) refers to the user ID and the password of a valid user in the registry of the target server. We can specify how the server validates the BasicAuth information.