Oracle SOA BPEL Process Manager 11gR1 – A Hands-on Tutorial

Chapter 9. Securing a BPEL Process

In an enterprise environment, BPEL services usually serve either mission-critical or business-critical business processes. These BPEL services exchange sensitive information with multiple composite applications, enterprise systems, and external service providers as a service consumer or provider. That is why it is critical to ensure that only authorized users have access to BPEL services and communication is kept private. It is an industry-leading practice to implement a separate vertical layer for securing BPEL process; commonly known as the security layer. The security control's implementation needs to have defense in depth and should be capable enough to deliver the basic principles of information security ...