WS-Security custom token in SOAP header

[Former Member]

Hi All,

We are conusming a web service hosted by an external system. They seem to support WS-Security, but they need custom/propriety token for the field <wsse:BinarySecurityToken/> in the SOAP header,

We already are able to get the token and now we need to make calls to API's of webservice.

The header of SOAP request should look something like -

<wsse:BinarySecurityToken

xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"

EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://schemas.xmlsoap.org/ws/2009/11/swt-token-profile-1.0"

wsu:Id="uuid:734ddb88-8b5a-4168-b1f4-ab0f6a34a3df">

UTF64tokentobepopulatedhere

</wsse:BinarySecurityToken>

I'm assuming we'll need to use AXIS adapter with com.sap.aii.adapter.axis.ra.handlers.security.WSDoAllReceiver handler ...but not clear on how to proceed.

Looking for some guidance to accomplish this.

Thanks for your time.

Karthik

[smavachee]

Have a look at SAP Note 1039369.

Regards,

Sunil

[Former Member]

Sunil,

I did follow SAP note 1039369 earlier. It documents a clear process for UsernameToken and Password modes of authentication.

I just want to send the following in SOAP header. This probably is just a signature. I am not using any certificate for this.

<wsse:BinarySecurityToken

xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"

EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://schemas.xmlsoap.org/ws/2009/11/swt-token-profile-1.0"

wsu:Id="uuid:734ddb88-8b5a-4168-b1f4-ab0f6a34a3df">

UTF64tokentobepopulatedhere

</wsse:BinarySecurityToken>

Any other suggestions?

Thanks

Karthik