Web service security is an important consideration in your planning, implementation and runtime support of web services to ensure your valuable and sensitive enterprise data remains safe. This security is implemented entirely by the facilities integrated with Axis2 (or Axis 1.4), which includes WS-Security, wss4j, etc. However, with the support of web services with Axis2 there is now the option (recommended and on by default) of requiring that clients of inbound web services provide credentials via IBM Cúram Social Program Management custom SOAP headers.