A customer needs message privacy and message integrity on a given transaction, and prefers the use of WS-Policy. WebSphere DataPower must receive a username from each user, but no authentication is required. In order to implement this without additional custom work, the solution implementer can:
- use WS-Policy with UsernameToken, Encryption and Signature enforced.
- use WS-Policy with Encryption, Signature and pass the username in the message body.
- use an Encrypt and SignAction in the request, followed by a Decrypt and Verify Action in the response.
- use a basic authentication header, then use the default encryption and signature inherent in the WS-Proxy.