0 Replies Latest reply on Jul 25, 2013 2:16 PM by e0457bd5-794c-4724-a0ba-8cc83113fd1a

    OSB access to X.509 fields




      I am configuring a proxy service secured with the policy wss10_x509_token_with_message_protection_service_policy. I have been able to configure it correctly and to test it with SoapUI.


      I am facing difficulties with a security requirement, I need to be able to access attributes of the user's certificate, the one used to perform authentication in Weblogic, because I need to check the DN and the Serial Number of the certificate against a database, in an OSB's stage. Is it possible to map these X.509 attributes with the user that is managed from the OSB? Exploring the variable inbound I only see the name of the Weblogic's user:


      <ctx:username xmlns:ctx="http://www.bea.com/wli/sb/context">client</ctx:username>


      Googling I suspect the solution can be to write a custom UserNameMapper for Weblogic, am I right? Is it possible to add attributes to a Weblogic's user in that custom class?


      OSB's version is 11g.


      Thanks in advance,