SOAP security standards

In this section read about the security policy standards, such as bindings, and the options for signing and encryption.

A Web service security policy requirements are included in the Web Services Description Language (WSDL) file. The policy is divided into these sections:
  • Security bindings
  • Security options
  • Signed parts
  • Encrypted parts
The following defines a policy:
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy ... />
The following section includes policy rules.
<wsp:ExactlyOne>

Only one assertion is fulfilled.

<wsp:All>

All the assertions included within this tag are fulfilled.

Demo WSDL

For a complete WS security policy document, see the WSDL file included with the demo "wssecuritymessage", located in $FGLDIR/demo/WebServices. For more information on the standard, refer to WS-SecurityPolicy.