Search code examples
wso2-api-managerwso2-appm

Enable ws-security for proxy service

Currently we have enabled ws-security in wso2 esb using policy file and role based authorization using Active Directory.

We would like to transition some of these services to wso2 api manager and implement the same security model.

How do we secure these APIs (that are facing web service client and not the backend web service) using ws-security on api manager?

Solution

  • To secure the APIs on API manager you can follow this guide. It provides various methods that can secure the APIs. Further if you need to implement role based authorization to the APIs in API manager you can refer to this tutorial.

    Hope this helps.