Hello,

I want to bring authentification into my services. The services are behind several wso2 esbs in several domains which haven´t always a connection to each other. So a centralized usermanager or database will not be enough for me. How is the best approach to do that? I have read about several ws-standars like ws-federation, but I have not seen any solution besides the tango-project of sun. But I am more on the axis2-train :-)

My ideas are to inject some user values in the soap-message (username and password) and encrypt the soap-message. The esb will take these values and proofs it by using the wso2 usermanager. After a successfull authentification I have to indicate that they other esbs and services itself don´t need to proof it again. I don´t want to make a new authentification at all intermediate stations, so in my eyes a flag in the soap message to say "Already authenticated" is enough, or? I have to write an own mediation than, right? Or is there a solution out of the box?
What´s about the identity solution? Does  it fit to my requirements?
Any other ideas in general for doing that?

I have seen following documentation:
http://wso2.org/library/2065
http://wso2.org/blog/dimuthul/2789

Any other documents available?
How can I embed the usermanager into the wso2 esb?
I have only seen the integration into an axis2 service...

Thanks in advance,
Jens



_______________________________________________
Esb-java-user mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/esb-java-user

Reply via email to