Configure WS-Security for communication with a Producer
You can configure WS-Security for the communication with a particular Producer portal by specifying the appropriate security profile for each WSRP port type in the Producer configuration on Consumer portal.
WebSphere Portal v7.0 provides three security profiles for the most common scenarios. These scenarios are described in the list below. Additionally, the portal allows you to add custom security profiles if required for environments. By default, none of the Producer ports specifies a security profile.
LTPA_TokenSecurity Profile for LTPA token forwarding. This works only if the Consumer and Producer portals share the same user registry and LTPA configuration. The Consumer portal authenticates to the Producer by propagating the LTPA token information in the WS-Security SOAP header.
Username_TokenSecurity Profile for Username token forwarding. This configuration propagates the clear text user name in the WS-Security SOAP header.
Signed_Username_TokenSecurity Profile for Username token forwarding including a signature, nonce, and timestamp. The signature signs the security token only and uses the following algorithms according to the WS-I Basic Security Profile 1.0 recommendations:
You can set the security profiles by either of the following two ways:
Transformationexclusive c14n. Refer to http://www.w3.org/2001/10/xml-exc-c14n#.
Canonicalizationexclusive c14n. Refer to http://www.w3.org/2001/10/xml-exc-c14n#.
Digestsha-1. Refer to http://www.w3.org/2000/09/xmldsig#sha1.
Signaturersa-sha1. Refer to http://www.w3.org/2000/09/xmldsig#rsa-sha1.
The key used to encrypt the digest and signature is taken from the default self-signed certificate configuration from the WAS by using the default alias. For more information refer to the URL given under Related information below.
- By using the administration portlet Web Service Configuration. In the portlet, navigate to the section for the security settings of a particular Producer, and specify security profiles for each port name.
- By using the XML configuration interface. For information on how to set security profiles by using the XML configuration interface, refer to the appropriate topic.
Parent
Secure WSRP by WS-Security for a Consumer portal
Next topic
Create and deploy custom WS-Security profiles
http://www.w3.org/2001/10/xml-exc-c14n#
http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2000/09/xmldsig#rsa-sha1