Configuring the System Participant in the Calling Process

To invoke the secured external web service from the calling process, you must assign the security policy that will be applied to the outgoing message sent by the task or event to the system participant that identifies the web service endpoint.

Note: There are no initial resources or solutions for this tutorial. The tutorial assumes that you already know how to create a business process application to implement a call to an external web service, and then how to deploy and test that application.

Procedure

  1. In TIBCO Business Studio, open the process that will be used to call the secured external web service.
  2. In Project Explorer, select the system participant that identifies the web service endpoint. This is typically the participant with the same name as the web service being called.
  3. On the General tab of the Properties view for this participant, expand Shared Resource. If it is not already selected, in Binding Details select SOAP over HTTP.
  4. In the Policy Type field, select X509 Token from the drop-down menu.
    Note: To call an external web service that is secured using:
    • a SAML "Sender Vouches" token, you would select SAML Token instead.
    • a UsernameToken, you would select Username Token instead.
  5. In the Governance App. Name field, enter the name of the BPM runtime identity provider resource instance that you created earlier, bsKeystoreRT. This application will be used to apply the required policy to the outgoing SOAP request.
    Note: The value of this field is not an actual resource instance, but an application that references the required resource instance. The purpose of the application is to inject the resource instance into policies that require it.