Policy sets and bindings define and configure your WS-Security and WS-RM requirements, supported by IBM® App Connect Enterprise, for the SOAPInput, SOAPReply, SOAPRequest, SOAPAsyncRequest, and SOAPAsyncResponse nodes.
A policy set is a container for the WS-Security and WS-RM policy types.
A policy set binding is associated with a policy set and contains information that is specific to the environment and platform, such as information about keys.
Either the whole SOAP message body, or specific parts of the SOAP message header and body can be encrypted and signed.
You administer policy sets and bindings from the IBM App Connect Enterprise Toolkit, where you can add, delete, display and edit policy sets and bindings. Any changes to policy sets or bindings are saved directly to the associated integration node. You must stop and then restart the message flow for the new configuration information to take effect.
You can also export policy sets and bindings from an integration node (see Exporting a policy set and policy set binding).
Policy sets are associated with a message flow, a message node, or both, in the BAR file editor. For convenience, you can specify settings for provider and consumer at the message flow level. The provider setting applies to all SOAPInput and SOAPReply nodes in the message flow. The consumer setting applies to all SOAPRequest, SOAPAsyncRequest, and SOAPAsyncResponse nodes. Individual policy set and binding assignments can be applied at the node level in the BAR editor, and these take precedence over the flow-level provider and consumer settings. The default setting is none, meaning that no policy set and bindings are to be used. For more information, see Associating policy sets and bindings with message flows and nodes.
Several nodes in the same message flow can refer to the same policy set and bindings. It is the responsibility of the administrator to ensure that the required policy sets are available to the integration node at run time. An error is reported if the integration node cannot find the associated policy set or bindings.
The rest of this topic describes some of the terms that you will meet when configuring policy sets and bindings.
When an integration node is created, default policy set and bindings are created called WSS10Default. This default policy set contains a limited security policy, which specifies that a Username token is present in request messages (inbound) to SOAPInput nodes in the associated message flow. A default WS-RM policy set called WSRMDefault is also created.
The default policy set binding refers to the default WSS10Default policy set, but not to WSRMDefault. They are not editable.
Node | Integration node viewpoint | Request | Response |
---|---|---|---|
SOAPInput | SOAP message inbound | Inbound message | Not applicable |
SOAPReply | SOAP message outbound | Not applicable | Outbound message |
SOAPRequest | SOAP message outbound followed by a SOAP message inbound | Outbound message | Inbound message |
SOAPAsyncRequest | SOAP message outbound | Outbound message | Not applicable |
SOAPAsyncResponse | SOAP message inbound | Not applicable | Inbound message |
Node | Integration node viewpoint | Initiator | Recipient |
---|---|---|---|
SOAPInput | SOAP message inbound | External client sending SOAP message to the integration node. | SOAPInput node |
SOAPReply | SOAP message outbound | External client that sent the original SOAP message to the integration node. | SOAPReply node |
SOAPRequest (outbound) | SOAP message outbound followed by a SOAP message inbound | SOAPRequest node | External provider receiving the SOAP message |
SOAPRequest (inbound) | SOAP message outbound followed by a SOAP message inbound | SOAPRequest node | External provider receiving the SOAP message |
SOAPAsyncRequest | SOAP message outbound | SOAPAsyncRequest node | External provider receiving the SOAP message |
SOAPAsyncResponse | SOAP message inbound | SOAPAsyncRequest node | External provider receiving the SOAP message |
This diagram shows the integration node acting as an initiator. It uses the asynchronous SOAP nodes to make a request to an external provider (the recipient). Inbound and outbound messages are signed and encrypted.