3. SOAP Processing Engine SOAP Engine Legacy Adaptors Web Services Container Custom Legacy Adaptors CORBA EJB Custom Custom Transports Custom Security / Session Control Custom Message Interceptors Java class
4.
5. Web Services Container – Plugin points Web Services Container Deployment API Execution API (Java) Call Handler Usage Controller Metadata Catalog Session Management Activation Policy Session Data Storage Java class Security Providers
6.
7.
8. Web Service Container Internals Web Service Container Execution Controller Authentication Authorization Activation Control Session Management Interceptor Control Call Handler Provider Provider Storage Provider Provider Interceptor(s) Application MetaData
9.
10.
11.
12.
13.
14.
15. Security credential propagation CapeConnect Server Import / map credentials from transport (e.g. IIS) Export / map credentials for call (e.g. WLS) Custom authenticator plugin Custom authorization plugin
16. Inbound Security Propagation Web Server Servlet Engine CapeConnect SOAP Engine CCSOAP Servlet Trust relationship Transport HTTP Basic or Digest Authentication, SSL Client-side Certificate, etc. Messaging Protocol / Re-authentication Credential import through: SOAP Basic or Digest Authentication, SAML SOAP Headers, etc.
17. Backend Security Propagation CapeConnect SOAP Engine SOAP Call Handler CORBA Call Handler EJB Call Handler CORBA Server EJB Server SOAP Server EJB Call Handler EJB Server Proxy Bean SOAP Credentials CSIv2 Credentials EJB Native Credentials User Bean Re-establish Credentials