WS-Security deals with message level security. It enables the user to encrypt and/or sign individual SOAP messages. It is based on a modified version of Apache XML-Security package 1.0.4/1.2.1 (http://xml.apache.org/security). WSO2 SOA Enablement Server supports specification drafts (namespaces http://schemas.xmlsoap.org/ws/2002/xx/secext, http://schemas.xmlsoap.org/ws/2002/07/secext, http://schemas.xmlsoap.org/ws/2002/06/secext and http://schemas.xmlsoap.org/ws/2003/06/secext), OASIS standard 1.0 and OASIS standard 1.0 Errata 1.0 (namespace http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd).

It is expected that the reader is familiar with the OASIS WS-Security specification.

Before you start using WS-Security, please read the System Requirements section and set up your system.