Programming Guide for Java › Task Execution Web Service › Web Service Configuration › Web Services Properties Screen

Web Services Properties Screen

The Web Services Properties screen lets you configure the Task Execution Web Service for the environment. This service allows third-party client applications to submit tasks from a remote location to CA Identity Manager for execution.

There are seven web services properties.

Enable Execution

Check to enable the Task Execution Web Service (TEWS) for the environment.

By default, TEWS is disabled.

Note: If you enable TEWS for the environment, restart the application server.

Enable WSDL Generation

Check to enable WSDL generation for the environment.

The URL to perform WSDL generation is accessible only when WSDL generation is enabled.

By default, WSDL generation is enabled.

Note: When generating WSDLs in a clustered environment, run one Policy Server and one CA Identity Manager Server. Stop all other Policy Servers and CA Identity Manager Servers within the cluster.

Enable admin_id (allow impersonation)

Specifies whether TEWS supports impersonation.

When this option is selected, TEWS uses the admin ID found in the SOAP message sent to the web service to authenticate the request.

When this option is not selected, the ID of the user who generated the request is used to authenticate the request.

This option is ignored when using WSS authentication.

Admin password is required

Specifies that CA Identity Manager obtains the admin ID from the session information to determine whether the administrator is authorized to perform the task.

This field is ignored when using WSS authentication.

SiteMinder Authentication

When CA Identity Manager integrates with SiteMinder, you can configure SiteMinder to secure the URL for web services.

• None (default)

  SiteMinder does not secure the web services URL. In this case, use an external method to secure the web services URL.

• Basic Authentication

  SiteMinder basic authentication secures access to the web services URL.

  When selected, CA Identity Manager automatically creates the authentication schemes, domain, realm, rule, and policies that are required to secure the URL for web services. You can modify these configuration settings in the SiteMinder Policy Server user interface.

• Other

  SiteMinder is used to authenticate web service requests, but CA Identity Manager does not create the required policy objects. When this option is selected, users configure the policy objects in the SiteMinder Policy Server user interface.

WSS UsernameToken (Password Text)

When selected, specifies that you are using the Web Services Security UsernameToken protocol for authentication. By default, this setting is not enabled.

Generate WSDL in WS-I form (Note: your existing TEWS code may need to be modified.)

When selected, specifies that the WSDL file is written compliant with the WS-I standard. By default, this setting is not enabled.

Note: None of the TEWS sample applications use this format.

When finished changing configuration settings on this screen, click Save.

For more information about issuing remote requests to CA Identity Manager through the Task Execution Web Service, see the Programming Guide. For more information about using SiteMinder to protect a web services URL, see the CA SiteMinder Web Access Manager Policy Server Configuration Guide.