A simple way to protect a BPEL Process.
1. Navigate to the /$ORACLE_HOME/bpel/domains/Domain_name/config/message-handlers.xml
2. Configure the process name which needs to be protected in the 'SecuredProcesses' tag
3.
property id="SecuredProcesses"
inbound-flow
message-handler id="Domain"
message-handler id="security"
inbound-flow
4. Generate a encrypted password based on DES algorithm.(i did through a java class)
[CDATA[TOEXz08rReMqnYt1uPZFjw==]]
10.1.3.3.1 works only with a DES algortihm .
Make sure the password is a properly encrypted if you miss one character you will
get a cipher error while deploying.
5. paste the below two lines in your bpel.xml file
configurations
property name="user" encryption="plaintext" oc4jadminproperty
property name="pw" encryption="encrypted" CDATA[TOEXz08rReMqnYt1uPZFjw==]]"property
configurations
make sure the you dont miss tags in the above encryption.
6. Deploy the process
7. used Soap UI for testing. Please make sure you pass the username /password in the token through soap header
Thanks
Prem.