MQSeries.net :: View topic - Secure and Unsecure message flows in WBM 8

ruimadaleno

Hi all,

we are running several web services (several message flows using soapinput / soapoutput nodes). Right now these services are deployed in several execution groups (each execution group holds a "type" of service -batch message flows, online, long running message flows, etc)

In the following projects we will need to expose some of these services to external providers (through internet). We are building a proof of concept to test the access to services from the internet. Now we are facing the following challenge:

we are deploying these set of service in a new execution group (Pro: isolate message flows available to external providers Con: extra management in broker, more resource consuption like memory)

The real challenge is about authentication. We need to change these set of services to provide authentication (so they can be safely exposed to the internet). So, what is the best way to achieve these requirements ?

1 - Create a copy of the service, modify to enable authentication. Deploy in the "dedicated" execution group. CON: Extra management efforts - every change in the service must be replicated to exposed and non-exposed service

2 - Somehow modify the service so it can provide authentication dynamically (can this be done ??? how can we built a service that is deployed in one execution group without authentication and at the same time deployed in the "dedicated" execution group with authentication.

3 - None of the above

environment: WMB 8.0.0.4 (soon 8.0.0.5) running on windows 2008 server R2
_________________
Best regards

Rui Madaleno