WebSphere Application Server - Session level security for web service

Author

Session level security for web service

vkumar

2007-07-23, 7:21 pm

Hello -
I am using Websphere 6.0 and RAD. I need to access a web service. The service is deployed on a server (websphere) with https enabled. There is no message level security, but I need to pass user credentials while invoking the service through the url to ge
t authenticated by the server.

Any idea how can I achieve this?

vk

Paul Ilechko

2007-07-23, 7:21 pm

vkumar wrote:
> Hello - I am using Websphere 6.0 and RAD. I need to access a web
> service. The service is deployed on a server (websphere) with https
> enabled. There is no message level security, but I need to pass user
> credentials while invoking the service through the url to get
> authenticated by the server.
>
> Any idea how can I achieve this?
>
> vk

You can pass user information in the HTTP headers and write a Trust
Association Interceptor (TAI) to assert that identity to WebSphere.