Securing a proxy service with authorization through Message Access Control

In the Securing a proxy service by Username Token authentication recipe we have made sure that only authenticated users have access to services through the use of OWSM. With this recipe, we will extend this security configuration with authorization to make sure that only selected users, roles, or groups hav access to the proxy service.

Getting ready

For this we will need the OSB project from the previous Securing a proxy service by Username Token authentication recipe.

The finished solution can be imported into Eclipse OEPE from \chapter-11\solution\securing-a-proxy-service-with-username-token.

How to do it...

In the Service Bus console, perform the following steps to cnfigure Message Access Control:

1. In the menu to the left, click Project Explorer.

2. Navigate to the CustomerManagement proxy service.

3. Navigate to the Security tab.

4. Click Create in the Change Center on the upper-left corner to create a new change session.

5. Make...