How to Enable Password Digest for Web Service Authentication (Doc ID 2802215.1)

Last updated on JUNE 12, 2024

Applies to:

Goal

UIM Web Service (WS) comes configured to use message-level security behavior of authentication using username/password token with password in plain text.
However using plain text password in WS request can be a security risk & overcome it one might opt for using password digest.

This document explains in detail how to configure password digest instead of plain-text password for WS authentication.
Enabling UIM WS support password digest for authentication, changes are required at 2 level:
    Level 1: Configuration changes at WLS to create WS security configuration and enabling password digest for authentication and identity assertion.
    Level 2: Associating a Custom policy with WS allowing password digest for authentication.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.