Oracle® Fusion Middleware

Oracle API Gateway Policy Developer Guide

11g Release 2 (11.1.2.4.0)

Oracle API Gateway Policy Developer Guide, 11g Release 2 (11.1.2.4.0)

Copyright © 1999, 2015, Oracle and/or its affiliates. All rights reserved.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this software or related documentation is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065.

This software is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications which may create a risk of personal injury. If you use this software in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure the safe use of this software. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software in dangerous applications.

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

This software and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services. This documentation is in prerelease status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

The information contained in this document is for informational sharing purposes only and should be considered in your capacity as a customer advisory board member or pursuant to your beta trial agreement only. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described in this document remains at the sole discretion of Oracle.

This document in any form, software or printed matter, contains proprietary information that is the exclusive property of Oracle. Your access to and use of this confidential material is subject to the terms and conditions of your Oracle Software License and Service Agreement, which has been executed and with which you agree to comply. This document and information contained herein may not be disclosed, copied, reproduced, or distributed to anyone outside Oracle without prior written consent of Oracle. This document is not part of your license agreement nor can it be incorporated into any contractual agreement with Oracle or its subsidiaries or affiliates.

25 March 2015


Contents

What's new
New topics
Updated topics
1. Get started
Policy development with Policy Studio
Overview
API Gateway instances and groups
Topology view
Filters
Policies
Message attributes
Selectors
Faults and errors
Policy shortcuts
Alerts
Policy containers
Policy contexts
Listeners
Remote hosts
Servlet applications
Service virtualization
Start the API Gateway tools
Overview
Before you begin
Launch API Gateway Manager
Start Policy Studio
Configure the sample policies
Overview
Enable the sample services interface
Configure a different sample services interface
StockQuote demo service
Remote host settings
Conversion sample policy
Overview
REST to SOAP policy
Run the conversion sample
Security sample policies
Overview
Signature verification
Run the signature verification sample
Encryption and decryption
Run the encryption and decryption sample
Throttling sample policy
Overview
Throttling policy
Run the throttling sample
Virtualized service sample policy
Overview
Virtualized service policies
Run the virtualized service sample
Stress test with send request (sr)
Overview
Basic sr examples
Advanced sr examples
sr arguments
Send a request with API Gateway Explorer
Overview
Create a request in API Gateway Explorer
Further information
2. Manage policies
Configure policies manually
Overview
Configuration
Configure global policies
Overview
Global policy roles
Select a global policy
Configure global policies in a policy shortcut chain
Configure global policies for a service
Show global policies
Configure policy assemblies
Overview
Configure a policy assembly
Apply a policy assembly
3. Web services
Register and secure web services
Overview
WSDL and XML schema cache
WSDLs from a UDDI registry
Policy Studio filters
Configure policies from WSDL files
Overview
API Gateway as the web service initiator
API Gateway as the web service recipient
Import WSDL summary
Import a WSDL file
Configure a security policy
Configure recipient security settings
Configure initiator security settings
Configure recipient policy filters
Configure initiator policy filters
Edit the recipient or initiator WS-Policy
Configure a recipient WCF WS-Policy
Remove security tokens
Manage web services
Overview
Manage web services and groups
Register a web service
Results of registering a web service
Export a web service
Update a web service
Change the operations exposed by a web service
Delete a web service
Use scripts to manage web services
Publish the WSDL
Manage WSDL and XML schema documents
Overview
Structure of the global cache
View cached WSDL or XML schema documents
Add XML schemas to the cache
Add WSDL documents to the cache
Update cached WSDL or XML schema documents
Delete cached WSDL or XML schema documents
XML schema and WSDL document validation
XML schema and WSDL document limitations
Version and duplicate management
Validate messages against XML schemas
Test a WSDL for WS-I compliance
Expose a web service as a REST API
Overview
Summary of steps
Virtualize a SOAP web service
Define a REST API
Route REST requests through the virtualized SOAP service
Test the REST to SOAP mapping
Connect to a UDDI registry
Overview
Configure a registry connection
Secure a connection to a UDDI registry
Retrieve WSDL files from a UDDI registry
Overview
UDDI concepts
UDDI definitions
Configure a registry connection
WSDL search
Quick search
Name search
Advanced search
Advanced options
Publish
Publish WSDL files to a UDDI registry
Overview
Find WSDL files
Publish WSDL files
Step 1: Enter virtualized service address and WSDL URL for publishing in UDDI registry
Step 2: View WSDL to UDDI mapping result
Step 3: Select a registry for publishing
Step 4: Select a duplicate publishing approach
Step 5: Create or search for business
Step 6: Publish WSDL
4. Messaging
Configure messaging services
Overview
Prerequisites
Configure API Gateway messaging using the JMS wizard
Configure global JMS services in external connections
Configure embedded Apache ActiveMQ in API Gateway settings
Monitor messaging using API Gateway Manager
Configure a JMS service
Overview
General configuration
Apache ActiveMQ and Standard JMS settings
IBM WebSphere MQ settings
Settings for all service types
Configure advanced settings
Next steps
Configure a JMS session
Overview
JMS session configuration
Monitoring options
Next steps
Configure a JMS consumer
Overview
JMS Message source
JMS consumer type
Message processing
Logging settings
Send to JMS
Overview
Request settings
Response settings
Read from JMS
Overview
Message source
JMS consumer type
Message processing
5. Manage deployments
Manage API Gateway deployments
Overview
Connect to a server in Policy Studio
Edit a server configuration in Policy Studio
Manage deployments in API Gateway Manager
Compare and merge configurations in Policy Studio
Manage Admin users in API Gateway Manager
Configure policies in Policy Studio
Deploy API Gateway configuration
Overview
Create a package in Policy Studio
Configure package properties in Policy Studio
Deploy packages in Policy Studio
Deploy a factory configuration in Policy Studio
Deploy currently loaded configuration in Policy Studio
Push configuration to a group in Policy Studio
View deployment results in Policy Studio
Deploy on the command line
Deploy packages in API Gateway Manager
Compare and merge API Gateway configurations
Overview
Compare and merge configurations
Comparison results
Filter differences
Select differences for merging
Manage Admin users
Overview
Admin user privileges
Admin user roles
Add a new Admin user
Remove an Admin user
Reset an Admin user password
Manage Admin user roles
6. General configuration
Manage connection details
Overview
Connect to a URL
Connect to a file
Unlock a server connection
Global configuration
Overview
API Gateway settings
Web service repository
API Gateway instances
Policies
Certificates and keys
API Gateway user store
System alerts
External connections
Caches
Black list and White list
WSDL and XML schema document bundles
Scripts
Stylesheets
References
Policy Studio preferences
Overview
Environmentalization
Policy colors
Prompt for credentials
Management services
Proxy settings
Runtime dependencies
SSL settings
Status bar
Topology screen
Trace level
WS-I settings
XML settings
Policy Studio viewing options
Overview
Filter the tree
Configure viewing options
Configure the policy filter palette
Oracle Security Service Module settings (10g)
Overview
Prerequisites
Settings
Name authority definition settings
Further information
Kerberos configuration
Overview
Kerberos configuration file—krb5.conf
Advanced settings
Native GSS library
Tivoli integration
Overview
Integration architecture
Prerequisites
Global Tivoli configuration
Tivoli authorization
Tivoli authentication
Tivoli attribute retrieval
Export API Gateway configuration
Overview
What is exported
Export configuration items
Export all API Gateway configuration
Import API Gateway configuration
Overview
Import configuration
View differences
What is imported
Import configuration from a previous version
7. API Gateway instances
Configure API Gateway instances
Overview
Add remote hosts
Add HTTP services
Add SMTP services
Add file transfer services
Add policy execution scheduling
Configure JMS messaging system
Add Amazon SQS queue listener
Add FTP poller
Add directory scanner
Add POP client
Configure TIBCO
API Gateway settings
Cryptographic acceleration
Configure HTTP services
Overview
HTTP services groups
HTTP and HTTPS interfaces
HTTPS interfaces only
Management services
Change the management services port
Configure relative paths
Overview
Configure a relative path
Policies settings
Logging settings
HTTP method settings
Advanced settings
CORS settings
Nested relative paths
Static content providers
Static file providers
Servlet applications
Web service resolvers
Configure virtual hosts
Overview
Configure virtual hosts for HTTP services
Configure SMTP services
Overview
Add an SMTP service
Add an SMTP interface
Configure policy handlers for SMTP commands
Add an HELO/EHLO policy handler
Add an AUTH policy handler
Add a MAIL policy handler
Add a RCPT policy handler
Add a DATA policy handler
SMTP authentication
SMTP Content-Transfer-Encoding
Deployment example
Configure a file transfer service
Overview
General settings
File upload settings
Secure services settings
Command settings
Access control settings
Message settings
Directory settings
Logging settings
Traffic monitor settings
Policy execution scheduling
Overview
Cron expressions
Add schedule
Add policy execution scheduler
Configure Amazon SQS queue listener
Overview
General settings
Configure AWS client settings
Further information
Configure an FTP poller
Overview
General settings
Scan settings
Connection type settings
Configure directory scanner
Overview
General settings
Input settings
Processing settings
On completion settings
Traffic monitor settings
Packet sniffers
Overview
Configuration
Configure remote host settings
Overview
General settings
Address and load balancing settings
Advanced settings
Configure watchdogs
Configure an incoming remote host
Configure WebSocket connections
WebSocket protocol overview
Configure a WebSocket connection
Monitor a WebSocket connection
Configure HTTP watchdog
Overview
Configuration
Configure conditions for HTTP interfaces
Overview
Configure Requires Endpoint condition
Configure Requires Link condition
Configure a POP client
Overview
Configuration
TIBCO integration
Overview
TIBCO Rendezvous integration
Cryptographic acceleration
Overview
General configuration
Conversations for crypto engines
Cryptographic acceleration conversation: request-response
Conversations for crypto engines
TIBCO Rendezvous listener
Overview
Configuration
8. External connections
External connections
Overview
Authentication repository profiles
Client credentials
Connection sets
Database connections
ICAP servers
JMS services
Kerberos connections
LDAP connections
Proxy servers
RADIUS clients
SiteMinder
SMTP servers
SOA Security Manager
Syslog servers
TIBCO
Tivoli
URL connection sets
XKMS connections
Authentication repository
Overview
Axway PassPort repositories
CA SiteMinder repositories
Database repositories
Entrust GetAccess repositories
Local repositories
LDAP repositories
Oracle Access Manager repositories
Oracle Entitlements Server 10g repositories
RADIUS repositories
RSA Access Manager repositories
Tivoli repositories
Axway PassPort authentication repository
Overview
Configuration
Axway PassPort repository registration
Configure client credentials
Overview
Configure API key client credential profiles
Configure HTTP basic/digest client credential profiles
Configure Kerberos client credential profiles
Configure Sentinel servers
Sentinel server overview
General settings
Further information
Configure database connections
Overview
Prerequisites
Configure the database connection
Database connection pool settings
Connection validation
Test the connection
Configure database query
Overview
Configuration
Configure ICAP servers
Overview
General settings
Server settings
Security settings
Advanced settings
Further information
Configure Kerberos clients
Overview
Kerberos endpoint settings
Advanced settings
Configure Kerberos principals
Overview
Configuration
Configure Kerberos services
Overview
Kerberos endpoint settings
Advanced settings
Kerberos Keytab concepts
Overview
Configuration
Configure LDAP directories
Overview
General configuration
Authentication configuration
Test the LDAP connection
Additional JNDI properties
Configure proxy servers
Overview
Configuration
Configure RADIUS clients
Overview
Configuration
Configure SiteMinder/SOA Security Manager connections
Overview
Prerequisites
SiteMinder and SOA Security Manager connection settings
SOA Security Manager connection settings
Configure SMTP servers
Overview
Configuration
Configure TIBCO Rendezvous daemons
Overview
Configuration
Configure XKMS connections
Overview
Configuration
9. Resources and libraries
Manage API Gateway users
Overview
API Gateway users
Add API Gateway users
API Gateway user attributes
API Gateway user groups
Add API Gateway user groups
Update API Gateway users or groups
Manage certificates and keys
Overview
View certificates and keys
Configure an X.509 certificate
Configure a private key
Configure HSMs and certificate realms
Configure SSH key pairs
Configure PGP key pairs
Global import and export options
Further information
Global caches
Overview
Local caches
Distributed caches
Distributed cache settings
Example of caching response messages
Cross-Origin Resource Sharing
Overview
Add a CORS profile
Configure CORS for HTTP services
Configure CORS for relative paths
10. Amazon Web Services filters
Send to Amazon SQS
Overview
General settings
Send message settings
Advanced settings
Further information
Upload to Amazon S3
Overview
General settings
Further information
11. Attribute filters
Compare attribute
Overview
Configuration
Extract REST request attributes
Overview
Configuration
Extract WSS header
Overview
Configuration
Extract WSS timestamp
Overview
Configuration
Extract WSS UsernameToken element
Overview
Configuration
Get cookie
Overview
Configuration
Attribute storage
Insert SAML attribute assertion
Overview
General settings
Assertion Details
Assertion Location
Subject Confirmation Method
Advanced settings
Retrieve attributes from JSON message
Overview
Configuration
JSON Path examples
Retrieve attribute from directory server
Overview
General settings
Database settings
Advanced settings
Retrieve attribute from HTTP header
Overview
Configuration
Retrieve attribute from SAML attribute assertion
Overview
Details
Trusted Issuers
Subject configuration
Lookup Attributes
Retrieve attribute from SAML PDP
Overview
Request configuration
Response configuration
Retrieve attribute from Tivoli
Overview
Configuration
Retrieve attribute from message
Overview
Configuration
Retrieve attribute from database
Overview
General settings
Database settings
Advanced settings
Retrieve attribute from user store
Overview
General settings
Database settings
Advanced settings
12. Authentication filters
Attribute authentication
Overview
Configuration
API key authentication
Overview
General settings
API key settings
Advanced settings
Check session
Overview
Configuration
Create session
Overview
Configuration
End session
Overview
Configuration
CA SOA Security Manager authentication
Overview
Prerequisites
Configuration
XmlToolkit.properties file
HTML form-based authentication
Overview
General settings
Session settings
HTTP basic authentication
Overview
General settings
HTTP digest authentication
Overview
General settings
HTTP header authentication
Overview
Configuration
IP address authentication
Overview
Configuration
Configure subnet masks
Insert SAML authentication assertion
Overview
General settings
Assertion details settings
Assertion location settings
Subject confirmation method settings
Advanced settings
Insert timestamp
Overview
Configuration
Insert WS-Security UsernameToken
Overview
General settings
Kerberos client authentication
Overview
General settings
Kerberos client settings
Kerberos token profile settings
Kerberos service authentication
Overview
General settings
Kerberos standard settings
Message level settings
Transport level settings
Advanced SPNEGO settings
SAML authentication
Overview
General settings
Details settings
Trusted issuer settings
SAML PDP authentication
Overview
General settings
Request settings
Response settings
SSL authentication
Overview
Configuration
STS client authentication
Overview
Example request
General settings
Request settings
Policies settings
Routing settings
Response settings
Advanced settings
WS-Security UsernameToken authentication
Overview
General settings
13. Authorization filters
RSA Access Manager authorization
Overview
Prerequisites
General settings
Attribute authorization
Overview
Configuration
Axway PassPort authorization
Overview
Configuration
CA SOA Security Manager authorization
Overview
Prerequisites
Configuration
Certificate attribute authorization
Overview
Configuration
Entrust GetAccess authorization
Overview
General settings
GetAccess WS-Trust STS settings
GetAccess SAML PDP settings
Insert SAML authorization assertion
Overview
General settings
Assertion details settings
Assertion location settings
Subject confirmation method settings
Advanced settings
LDAP attribute authorization
Overview
General configuration
Advanced configuration
SAML authorization
Overview
General settings
Details settings
Trusted issuer settings
Optional settings
SAML PDP authorization
Overview
General settings
Request settings
Response settings
Tivoli authorization
Overview
Add a Tivoli client
Add users and web services to Tivoli
Configuration
XACML PEP authorization
Overview
Example XACML request
General settings
XACML settings
Routing settings
Advanced settings
14. CA SiteMinder filters
SiteMinder certificate authentication
Overview
Prerequisites
Configuration
SiteMinder session validation
Overview
Prerequisites
Configuration
SiteMinder logout
Overview
Prerequisites
Configuration
SiteMinder authorization
Overview
Prerequisites
Configuration
15. Certificate filters
Static CRL certificate validation
Overview
Example CRL-based validation policy
Configuration
Dynamic CRL certificate validation
Overview
Example CRL-based validation policy
Configuration
CRL LDAP validation
Overview
Configuration
CRL responder
Overview
Configuration
Create thumbprint from certificate
Overview
Configuration
Certificate validity
Overview
Configuration
Find certificate
Overview
Configuration
Further information
Extract certificate attributes
Overview
Generated message attributes
Configuration
Certificate chain check
Overview
Configuration
OCSP client
Overview
General settings
Message settings
Routing settings
Advanced settings
Integration with Axway Validation Authority
Validate certificate store
Overview
Configuration
Deployment example
XKMS certificate validation
Overview
Configuration
16. Cache filters
Cache attribute
Overview
Configuration
Create key
Overview
Configuration
Check if attribute is cached
Overview
Configuration
Remove cached attribute
Overview
Configuration
17. Content filters
Scan with ClamAV anti-virus
Overview
Configuration
Content type filtering
Overview
Allow or deny content types
Configure MIME/DIME types
Content validation
Overview
Manual XPath configuration
XPath wizard
HTTP header validation
Overview
Configure HTTP header regular expressions
Configure threatening content regular expressions
Regular expression format
Send to ICAP
Overview
Configuration
Example policies
Further information
Scan with McAfee anti-virus
Overview
Prerequisites
Configuration
Custom options
Message status
Load McAfee updates
Message size filtering
Overview
Configuration
Query string validation
Overview
Request query string
Configure query string attribute regular expressions
Configure threatening content regular expressions
Regular expression format
Schema validation
Overview
General settings
Selecting the schema
Selecting which part of the message to match
Advanced settings
Reporting schema validation errors
JSON schema validation
Overview
Configuration
Generate a JSON schema using Jython
Scan with Sophos anti-virus
Overview
Prerequisites
General settings
Sophos configuration settings
Threatening content
Overview
Scanning settings
MIME type settings
Regular expression format
Throttling
Overview
Rate limit settings
Advanced settings
Use multiple throttling filters
Validate selector expression
Overview
Configure selector-based regular expressions
Threatening content regular expressions
Validate REST request
Overview
General settings
Adding REST request parameter restrictions
URI path templates
Validate timestamp
Overview
Configuration
Verify the WS-Policy security header layout
Overview
Configuration
XML complexity
Overview
Configuration
18. Conversion filters
Add HTTP header
Overview
Configuration
Add XML node
Overview
Configuration
Examples
Transform with Contivo
Overview
Configuration
Convert multipart or compound body type message
Overview
Configuration
Create cookie
Overview
Configuration
Create REST request
Overview
Configuration
Extract MTOM content
Overview
Configuration
Insert MTOM attachment
Overview
Configuration
Add node to JSON document
Overview
Configuration
Examples
Remove node from JSON document
Overview
Configuration
Examples
Convert JSON to XML
Overview
Configuration
Examples
Load contents of a file
Overview
Configuration
Remove HTTP header
Overview
Configuration
Remove XML node
Overview
Configuration
Remove attachments
Overview
Configuration
Restore message
Overview
Configuration
Set HTTP verb
Overview
Configuration
Set message
Overview
Configuration
Example of using selectors in the message body
Store message
Overview
Configuration
Convert XML to JSON
Overview
Configuration
Transform with XSLT
Overview
Configuration
19. Encryption filters
Generate key
Overview
Configuration
PGP decrypt and verify
Overview
Configuration
PGP encrypt and sign
Overview
General settings
Encrypt and sign settings
Advanced settings
SMIME decryption
Overview
Configuration
SMIME encryption
Overview
General settings
Recipient settings
Advanced settings
XML decryption
Overview
Configuration
Auto-generation using the XML decryption wizard
XML decryption settings
Overview
XML encryption overview
Nodes to decrypt
Decryption key
Options
Auto-generation using the XML decryption wizard
XML encryption
Overview
Configuration
Auto-generation using the XML encryption settings wizard
XML encryption settings
Overview
XML encryption overview
Encryption key settings
Key info settings
Recipient settings
What to encrypt settings
Advanced settings
Auto-generation using the XML encryption settings wizard
XML encryption wizard
Overview
Configuration
20. Integrity filters
XML signature generation
Overview
General settings
Signing key settings
What to sign settings
Where to place signature settings
Advanced settings
XML signature verification
Overview
General settings
Signature verification settings
What must be signed settings
Advanced settings
Sign SMIME message
Overview
Configuration
Verify SMIME message
Overview
Configuration
21. Fault handler filters
Generic error handling
Overview
General settings
Generic error contents
Create customized generic errors
JSON error handling
Overview
General settings
JSON error contents
Create customized JSON errors
SOAP fault handling
Overview
SOAP fault format settings
SOAP fault content settings
Create Customized SOAP faults
22. Monitoring filters
Configure system alerts
Overview
Configure an alert destination
Configure an alert filter
Set transaction log level and log message
Overview
Configuration
Log message payload
Overview
Configuration
Service level agreement
Overview
Response time requirements
HTTP status requirements
Communications failure requirements
Select alerting system
Set service context
Overview
General settings
Send event to Sentinel
Overview
General settings
Further information
Send cycle link event to Sentinel
Overview
General settings
Further information
23. Oracle Access Manager filters
Oracle Access Manager authorization
Overview
General settings
Request settings
OAM Access SDK settings
Oracle Access Manager certificate authentication
Overview
General settings
Resource settings
Session settings
OAM Access SDK settings
Oracle Access Manager SSO session logout
Overview
Configuration
Oracle Access Manager SSO token validation
Overview
Configuration
24. Oracle Entitlements Server filters
Oracle Entitlements Server 10g authorization
Overview
Configuration
Get roles from Oracle Entitlements Server 10g
Overview
Configuration
Oracle Entitlements Server 11g authorization
Overview
Configuration
25. Resolver filters
Operation name resolver
Overview
Configuration
Relative path resolver
Overview
Configuration
Regular expression format
SOAP action resolver
Overview
Configuration
Regular expression format
26. Routing filters
Getting started with routing configuration
Overview
Proxy or endpoint server
Service virtualization
Choosing the correct routing filters
Case 1: Proxy without service virtualization
Case 2: Proxy with service virtualization
Case 3: Endpoint without service virtualization
Case 4: Endpoint with service virtualization
Case 5: Simple redirect
Case 6: Routing on to an HTTP proxy
Summary
Call internal service
Overview
Configuration
Connection
Overview
General settings
SSL settings
Authentication settings
Additional settings
Connect to URL
Overview
General settings
Request settings
SSL settings
Authentication settings
Additional settings
Dynamic router
Overview
Configuration
Extract path parameters
Overview
Configuration
Required input and generated output
Possible outcomes
File download
Overview
General settings
File details
Connection type
FTP and FTPS connections
FTPS connections
SFTP connections
File upload
Overview
General settings
File details
Connection type
FTP and FTPS connections
FTPS connections
SFTP connections
HTTP redirect
Overview
Configuration
HTTP status code
Overview
Configuration
Insert WS-Addressing information
Overview
Configuration
Read WS-Addressing information
Overview
Configuration
Rewrite URL
Overview
Configuration
Save to file
Overview
Configuration
Route to SMTP
Overview
General settings
Message settings
Static router
Overview
Configuration
Route to TIBCO Rendezvous
Overview
Configuration
Wait for response packets
Overview
Packet sniffer configuration
Sniffing response packets
27. Security services filters
Encrypt and decrypt web services
Overview
Configuration
DSS signature generation
Overview
Configuration
STS web service
Overview
Configuration
DSS signature verification
Overview
Configuration
28. Trust filters
Consume WS-Trust message
Overview
Configuration
Create WS-Trust message
Overview
Configuration
29. Utility filters
Abort policy
Overview
Configuration
Check group membership
Overview
Configuration
Possible paths
Copy or modify attributes
Overview
Configuration
Evaluate selector
Overview
Configuration
Execute external process
Overview
Configuration
False filter
Overview
Configuration
HTTP parser
Overview
Configuration
Insert BST
Overview
Configuration
Invoke policy per message body
Overview
Configuration
Locate XML nodes
Overview
Configuration
Management services RBAC
Overview
Configuration
Pause processing
Overview
Configuration
Create policy shortcut
Overview
Configuration
Create policy shortcut chain
Overview
General settings
Add a policy shortcut
Edit a policy shortcut
Quote of the day
Overview
Configuration
Reflect message
Overview
Configuration
Reflect message and attributes
Overview
Configuration
Remove attribute
Overview
Configuration
Set attribute
Overview
Configuration
Set response status
Overview
Configuration
Replace string
Overview
Configuration
Switch on attribute value
Overview
Configuration
Add a switch case
Allow or block messages at specified times
Overview
General settings
Basic time settings
Advanced time settings
Trace filter
Overview
Configuration
True filter
Overview
Configuration
30. Web services filters
Web service filter
Overview
General settings
Routing settings
Validation settings
Configuring message interception points
WSDL settings
Monitoring options
Return WSDL
Overview
Configuration
Set web service context
Overview
General settings
Service WSDL settings
Monitoring settings
31. Extend filters
Advanced filter view
Overview
Configuration
Select configuration values at runtime
Overview
Selector syntax
Example selector expressions
Extract message attributes
Key Property Store
Overview
KPS data sources
Add a KPS collection
Edit a KPS collection
Add a KPS table
Define the KPS table structure
Define the KPS table structure
Scripting language filter
Overview
Write a script
Add your script JARs to the classpath
Configure a script filter
Add a script to the library
32. Configure common settings
Certificate validation
Overview
Configuration
Compressed content encoding
Overview
Encoding of HTTP responses
Encoding of HTTP requests
Delimit the end of an HTTP message
Configure content encodings
Further information
Configure connection groups
Overview
Configure a connection group
Configure a connection
Configure cron expressions
Overview
Create a cron expression using the time tabs
Enter a cron expression
Test the cron expression
Further information
Signature location
Overview
Configuration
Configure a transparent proxy
Overview
Configure transparent proxy mode for incoming interfaces
Configure transparent proxy mode for outgoing calls
Configuration example
LDAP user search
Configure directory search
Configure URL groups
Overview
Configuration
What to sign
Overview
ID configuration
Node locations
XPath configuration
XPath predicates
Message attribute
Configure XPath expressions
Overview
Manual configuration
XPath wizard
33. Reference
WS-Policy reference
License acknowledgments
Overview
Acknowledgments
?xml version="1.0" encoding="UTF-8"?>