Assigning a WS-Security Handler to a Web Service Descriptor
To specify the WS-Security facility policy that you want to use with a web service descriptor, first assign a WS-Security handler to the web service descriptor, then associate a WS-Security facility policy with the handler.
Use the following steps to assign a WS-Security handler and associated security policy to the web service descriptor.
To assign a WS-Security handler to a web service descriptor
1. In Package Navigator view, open and lock the web service descriptor for which you want to configure WS-Security.
2. In the Properties view, next to Pre-8.2 compatibility mode, select True to indicate that you want the web service descriptor to run in pre-8.2 compatibility mode.
3. In the web service descriptor editor, on the Handlers tab, use one of the following mechanisms for adding a header handler:
Click
on the toolbar. A list of available header handlers appears. Select
WS Security Handler.
Right-click in the Handlers tab and click
Add Handler. A dialog box appears with a list of available header handlers. Select
WS Security Handler and click
OK.
Cut or copy an existing WS-Security handler
4. Make sure the WS Security Handler is selected. In the Properties view, in the Policy name field, select the name of the WS-Security facility policy that you want to associate with the WS-Security handler.
Designer sets the value of the Effective policy name property to match the selected policy name.
Note:Designer sets the value of the effective policy name to match policyName the first time only that a policy name is specified. If you later change the policy name, Designer does not automatically update the effective policy name. If you want the effective policy name to match the new policy name, you must specify the new policy in the Effective policy property.
5. Click File > Save.
Important:
The order of handlers is important. For provider web service descriptors, it is recommended that the WS-Security handler be the first handler listed. For consumer web service descriptors, it is recommended that the WS-Security handler be the last handler listed.