How to secure a BPEL process which is called by another BPEL process?

Assume that we want to secure a BPEL process (BPELProcess1) that is called by another BPEL process (BPELProcess2) using OWSM server side agent. Moreover both BPEL processes are located in the same Oracle AS.






For the OWSM server side agent installation and configuration follow the description on OTN how to "Securing Oracle SOA Applications by Using Oracle Web Services Manager (Oracle WSM) Agents".

Additional to that you have to do the following configuration in your BPELProcess2, otherwise the security policies configured in the server side agent for BPELProcess1 will ignored because the communication between these two BPEL processes uses not SOAP but WSIF (native call).

Open in JDeveloper the BPELProcess2.bpel, right click on the partner link BPELProcess1 and select edit. Then swith to the Property tab. On this tab use the Create button to add a new property called "optSoapShortct". You can pick the name of this property from the drop down combo. Set the value in the "Property Value" box to "false".

I used the following environment:
Oracle SOA Suite 10.1.3.3 on Linux
JDeveloper 10.1.3.3 on Windows XP