Security Credentials propagation between SOA and OSB

Generally we secure OSB layer using OWSM and invoke SOA services as the processing layer. However if multiple layers of security is required we can propagate the security credentials using SAML policy from OSB to SOA.

Here are the steps:
In OSB service attach oracle/wss_username_token_service_policy to the proxy.

Create Business service to Invoke the SOA process and attach oracle/wss10_saml_token_client_policy 

 For SOA service attach oracle/wss10_saml_token_service_policy

Test the Proxy service using test console, pass security header using header values or token value.
Credentials will be propagated from OSB to SOA for authentication.


This works!!