About This Book

This book describes, to programmers, how to secure InterSystems IRIS® web services and web clients. It includes the following sections:

• Introduction

• Setup and Other Common Activities

• Creating and Using Policies

• WS-Policy Configuration Class Details

• Adding Security Elements Manually

• Adding Timestamps and Username Tokens

• Encrypting the SOAP Body

• Encrypting Security Header Elements

• Adding Digital Signatures

• Using Derived Key Tokens for Encryption and Signing

• Combining Encryption and Signing

• Validating and Decrypting Inbound Messages

• Creating Secure Conversations

• Using WS-ReliableMessaging

• Creating and Adding SAML Tokens

• Troubleshooting Security Problems

• Details of the Security Elements

For a detailed outline, see the table of contents.

For additional information, see the following resources:

• Creating Web Services and Web Clients describes how to create InterSystems IRIS web services and clients.

• Using XML Tools includes information on how to encrypt and sign XML documents, outside of SOAP messages, following the XML-Encryption and XML-Signature specifications.