Hi,
I have a SOA Service 11.1.1.5. I need to protect the service so that a specific user/password is accepted to invoke the service. I have also configured OID LDAP Provider. I tried both the below policies
oracle/wss_username_token_service_policy
oracle/wss_http_token_service_policy
but looks like anyone who is invoking the service is able access it as they are part of OID provider that is configured. I created a custom user/password that should only have access to the service. How can I achieve this.
Thanks