Web Services Security for WSRP OracleAS Portal 10.1.4

This white paper describes how to secure access to JSR 168 standards-based WSRP v1 portlets from OracleAS Portal 10.1.4.1. The Web Services for Remote Portlets (WSRP) specification indicates that Web Services Security (WS-Security) may be leveraged for providing secure identity propagation between the Portal consumer and the portlet producer. Without using such a mechanism, WSRP in and of itself, does not provide secure identity propagation of the end user's identity to the portlet producer. The WSRP specification explicitly defers to other security standards for secure identity propagation. However, it does not go into the specific WS-Security profiles or options that should be employed.