Installation Guides › SOA Agent for Oracle WebLogic Guide › SOA Agent for Oracle WebLogic Introduction › SOA Agent for Oracle WebLogic Overview

SOA Agent for Oracle WebLogic Overview

The SOA Agent for Oracle WebLogic resides in a WebLogic application server, enabling you to protect WebLogic-hosted JAX-RPC web service resources.

The SOA Agent for Oracle WebLogic intercepts all SOAP messages sent over HTTP(S) or JMS transports to JAX-RPC web services deployed on the WebLogic Server. The SOA Agent then communicates with the Policy Server to authenticate and authorize the message sender and, upon successful authentication and authorization, passes the SOAP message on to the addressed web service.

A high-level overview of the SOA Agent for Oracle WebLogic Server architecture is shown in the following figure.

The SOA Agent for Oracle WebLogic provides the following features:

• Fine-grained access control of JAX-RPC web service resources
• Support for bi-directional SOA Security Manager/SiteMinder and WebLogic single sign-on (SSO)

The SOA Agent additionally supports:

• Multi-byte character user names
• Centralized and dynamic agent configurations
• Caching of resource protection decisions and authentication and authorization decisions
• Logging
• Authorization auditing