Securing the Data Relationship Management Web Services

It is important to protect the DrmService and DrmGovernanceService Web services using a security policy in Oracle Web Services Manager. Different policies may be attached depending on usage.

The following policies can be used with the Oracle Data Relationship Management Web services:

Purpose	Policy
Integration with Oracle Hyperion Financial Data Quality Management, Enterprise Edition	oracle/wss_username_token_service_policy or oracle/wss_username_token_service_policy (applies to DrmService only)
Integration with E-Business Suite General Ledger	oracle/wss_username_token_service_policy (applies to DrmService only)
Integration with Oracle Fusion Accounting Hub	oracle/wss_saml_or_username_token_service_policy (applies to DrmService only)
Workflow Development Kit	oracle/wss11_saml_or_username_token_with_message_protection (applies to DrmService only)
Custom API Programs or Integrations	One of the following (applies to DRMService and DRMGovernanceService): oracle/wss11_saml_or_username_token_with_message_protection oracle/wss_username_token_service_policy oracle/wss_saml_or_username_token_service_policy oracle/wss_http_token_service_policy

See "Attaching Policies to Web Services" in Oracle Fusion Middleware Security and Administrator's Guide for Web Services.