Hi,
I am calling an external web service (external reference) from bpel in a composite application version 11.1.1.7, the service that I am calling requires usernametoken ws-security and is reached by https, I attached the policy oracle/wss_username_token_client_policy and oracle/log_policy so i can view the entire SOAP message, (I also made the basic.credentials configuration and I have tried with the properties oracle.webservices.auth.password and oracle.webservices.auth.username too without success). The problem is that the request soap message sent by bpel is not setting the username and password in the header, all I can view in the soap header is this:
<env:Header><wsa:To>https://myserver:7000/GC3Services/IntXmlService/call</wsa:To><wsa:Action>process</wsa:Action><wsa:MessageID>urn:0CF65DF0F8AD11E38F787D1F1907427F</wsa:MessageID><wsa:RelatesTo>urn:0CF65DF0F8AD11E38F787D1F1907427F</wsa:RelatesTo><wsa:ReplyTo><wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address><wsa:ReferenceParameters><instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">11d1def534ea1be0:5514321:146b552a766:-8000-000000000000cb45</instra:tracking.ecid><instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:0CF65DF0F8AD11E38F787D1F1907427F</instra:tracking.conversationId><instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">reference:20010</instra:tracking.parentComponentInstanceId><instra:tracking.compositeInstanceCreatedTime xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2014-06-20T11:59:40.808-07:00</instra:tracking.compositeInstanceCreatedTime></wsa:ReferenceParameters></wsa:ReplyTo><wsa:FaultTo><wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address><wsa:ReferenceParameters><instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">11d1def534ea1be0:5514321:146b552a766:-8000-000000000000cb45</instra:tracking.ecid><instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:0CF65DF0F8AD11E38F787D1F1907427F</instra:tracking.conversationId><instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">reference:20010</instra:tracking.parentComponentInstanceId><instra:tracking.compositeInstanceCreatedTime xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2014-06-20T11:59:40.808-07:00</instra:tracking.compositeInstanceCreatedTime></wsa:ReferenceParameters></wsa:FaultTo></env:Header>
I don't know why bpel is not sending the username and password if the policy oracle/wss_username_token_client_policy is enabled (I have also tried with the policy oracle/wss_username_token_over_ssl_client_policy without success).
Thank you,
Carlos.