Configuration Guides › SOA Agent for Web Servers Guide › Configure the SOA Agent for Web Servers › Configure SOA Agent for Web Servers to Enable Fine-Grain Resource Identification

Previous Topic: SOA Agent for Web Servers Parameters

Next Topic: Configure the Username and Password Digest Token Age Restriction

Configure SOA Agent for Web Servers to Enable Fine-Grain Resource Identification

By default, the SOA Agent for Web Servers identifies incoming requests for web service resources as follows:

[URL][Web Service Name]

However, the SOA Agent for Web Servers can be configured to provide fine-grain resource identification, additionally identifying the requested web service operation name, so that requests are identified as:

[URL][Web Service Name][Web Service Operation]

This allows you to define fine-grain policies that include the web service operation in authorization decisions, but may adversely affect transaction performance.

Note: For more information on configuring fine-grain authorization policies, see the CA SOA Security Manager Policy Configuration Guide.

To configure a SOA Agent to identify web service operations for fine-grain authorization

  1. Ensure that the XMLSDKResourceIdentification Agent configuration parameter is present and set to Yes for the target SOA Agent for Web Servers.
  2. Edit the XmlToolkit.properties file located in SOA_Agent_Install\java to ensure that the WSDMResourceIdentification entry is present and set to "Yes".
  3. Save and close the XmlToolkit.properties file.
  4. Restart the target SOA Agent for Web Servers.

Note: You must enable fine-grain resource identification to use the Administrative UI to generate policies for web service resources protected by the SOA Agent for Web Servers from their associated WSDL files.