How is it possible to configure for WS Process the Authentification. That the other application can start this only using credentials (simple: username, pwd) ?

asked 10.06.2014 at 14:54

Karel%20Tauser's gravatar image

Karel Tauser
(suspended)
accept rate: 0%


The ivy WebServiceProcess supports Basic authentication. You can enable it as follows:

  • Right click on the process in the ivyProject tree
  • Choose the "Inscription" context menu entry
  • Navigate to the "Web Service Process" tab
  • Choose "HTTP Basic" as Web Service authentication

You can proof the configuration with SOAP UI. Simple calls requests to WS process starts should no longer be possible.

alt text

Please consult the designer guide for further information: Web Service Process Properties

link

answered 20.06.2014 at 13:57

Reguel%20Wermelinger's gravatar image

Reguel Werme... ♦♦
9.4k31958
accept rate: 70%

edited 20.06.2014 at 14:00

thanks, you are right, i tested it already. But where is the user "user1" defined. Is it a Ivy user?

(23.06.2014 at 13:32) Karel Tauser Karel%20Tauser's gravatar image

user1 is a sample for an ivy user. In this case I've created a Test User in the designer. In production it normally make sense to have a technical user + role with very limited rights.

(23.06.2014 at 14:02) Reguel Werme... ♦♦ Reguel%20Wermelinger's gravatar image

Hi,thx for your help. It is working good with designer, starting it from server (5.0) i receive always error: HIERARCHY_REQUEST_ERR: An attempt was made to insert a node where it is not permitted

Should be something set on server?

(25.06.2014 at 17:53) Karel Tauser Karel%20Tauser's gravatar image
1

This is a known issue of Xpert.ivy. You can track it in the soreconnect under #22513: Web Service Process with WS Security does not work on Server

You can workaround the problem by removing the shipped AXIS2 SAAJ jars. So in more detail:

  1. Rename the jars axis2-saaj-1.3.jar & axis2-saaj-api-1.3.jar to an unusable extension. like: .jar.inactive
(27.06.2014 at 15:02) Reguel Werme... ♦♦ Reguel%20Wermelinger's gravatar image

The HIERARCHY_REQUEST_ERR is fixed in the next major release (5.1 Lauberhorn). So the basic authentication will work out of the box without a work around. If you want to give it a try, Lauberhorn 5.1 is already available as Release Candidate download

(03.07.2014 at 08:51) Reguel Werme... ♦♦ Reguel%20Wermelinger's gravatar image

thx, it works... Now we can call it from SOAP UI also on server. But if we call it from designer, we get the error. Is there also some workaround ?

AxisFault: An error was discovered processing the wsse:Security header

(14.07.2014 at 14:35) tauser tauser's gravatar image

With a Webservice Call in ivy step you can not call this secured ivy WS Process.

See #22823: Support common authentication for WS Step and WS Proc

I suggest that you use the Webservice Process only as wrapper for a callable SubProcess. And call the subProcess directly if you like to invoke this logic from another process.

(14.07.2014 at 15:27) Reguel Werme... ♦♦ Reguel%20Wermelinger's gravatar image

thank you for your answer... it is bad for us, no wrapper, we have on first server ivy application providing ws, on second server ivy application calling ws.

(16.07.2014 at 13:43) tauser tauser's gravatar image
3

This Q&A entry describes How to call a secured WS Process with a WS Call Element. But works only for ivy versions 4.3.24, 5.0.14 and 5.1.0 or greater.

(04.09.2014 at 11:23) Dominik Regli ♦ Dominik%20Regli's gravatar image
1

Update: Starting with Axon.ivy BPM Suite 6.0.4 and 6.2 WebService Processes also supports HTTP Basic authentification. Therefore both WebService Call process element and WebService process supports now a common authentication mechanism.

(15.06.2016 at 15:49) Reto Weiss ♦♦ Reto%20Weiss's gravatar image
showing 5 of 10 show 5 more comments

You can build your own authentication. I think there is none in ivy yet. For some sample code see WS-Secure. I used it in non ivy projects and it worked perfectly.

link

answered 10.06.2014 at 15:23

Daniel%20Oechslin's gravatar image

Daniel Oechslin
(suspended)
accept rate: 39%

we would like to use WS Process for webservice, how to combine with own authentification ?

(12.06.2014 at 12:48) Karel Tauser Karel%20Tauser's gravatar image

Could you write your question in your mothertongue?

(12.06.2014 at 14:09) Daniel Oechslin Daniel%20Oechslin's gravatar image

it is not german ;-) So, i would like to use IVY STANDARD Web Services Element. Is there any possibility to secure the call in easy way ?

(13.06.2014 at 13:32) Karel Tauser Karel%20Tauser's gravatar image
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×48

Asked: 10.06.2014 at 14:54

Seen: 4,090 times

Last updated: 15.06.2016 at 15:49