A Web Services policy is the same as an authentication scheme, but it is expressed in the form of an element in an XML file.

The XML snippet is referred to as a Web Services policy. The format of the XML snippet is described in Web Services Policy 1.2 - Framework (WS-Policy), which is at:

This is the official specification, and the best source of reference for understanding policies.

Policies are server-side. The reason for selecting a policy is to tell the TDV server what authentication scheme to use when authenticating requests from clients.

TDV uses the Metro JDK to implement the authentication for each policy. Metro is documented at:

Web policy basics are explained at:

Further information about Web Service policy can be found at:

As TDV administrator, you need to select the policy that represents the desired authentication scheme. You do not need to:

To select Basic Authentication for a SOAP Web Service, select the policy that represents the authentication scheme from the Security Policy drop-down list in the Service pane on the SOAP panel for the Web Service you are publishing. For a description of the procedure, see “Publishing a WSDL SOAP Data Service” or “Publishing a Contract-First WSDL SOAP Data Service” in the TDV User Guide.

To select Basic Authentication for a REST Web Service, make sure Enable HTTP Basic is set to true in the Service pane on the REST panel for the Web Service you are publishing. For a description of the procedure, see “Publishing a WSDL REST Data Service” in the TDV User Guide.