InBound Security in BPEL

Hello All,

A simple way to protect a BPEL Process.

1. Navigate to the /$ORACLE_HOME/bpel/domains/Domain_name/config/message-handlers.xml

2. Configure the process name which needs to be protected in the 'SecuredProcesses' tag

3.



property id="SecuredProcesses"



inbound-flow
message-handler id="Domain"
message-handler id="security"
inbound-flow






4. Generate a encrypted password based on DES algorithm.(i did through a java class)

[CDATA[TOEXz08rReMqnYt1uPZFjw==]]

10.1.3.3.1 works only with a DES algortihm .

Make sure the password is a properly encrypted if you miss one character you will

get a cipher error while deploying.

5. paste the below two lines in your bpel.xml file

configurations
property name="user" encryption="plaintext" oc4jadminproperty
property name="pw" encryption="encrypted" CDATA[TOEXz08rReMqnYt1uPZFjw==]]"property
configurations

make sure the you dont miss tags in the above encryption.

6. Deploy the process

7. used Soap UI for testing. Please make sure you pass the username /password in the token through soap header


Thanks
Prem.