Hi all,

My request is quite simple. I have to consume from an application (consumer) not supporting WS-Security specs a web service following WS-Security specs.

This consumer is proprietary and can't be modified. IMHO, the best way to tackle this issue is creating a web service proxy handling WS-Security stuff (authentication) and exposing the original web service without the WS-Security layer. So, the proxy will be responsible to append credentials on each operation invokation.

Let me know your thoughts about this design and if WSO2 ESB can help me in that way.

Any help would be appreciated,

Regards,
Alexandre