Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,267 questions
APIM Policy conditions for SOAP API
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 78%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYK%3C/text%3E%3C/svg%3E)
Yadav, Krishna
21
Reputation points
1.Requests with an invalid request MessageHeader are blocked; a standard SOAP Fault is returned
2.When request does not contain a MessageHeader: generate Message Header
ConsumerRef.userID = "unknown"
ConsumerRef.customerID = equal to the client (application) id from the OAuth token
ConsumerRef.customerLocation = "unknown"
- When request contains a valid MessageHeader & authentication and authorization steps are successful: populate the follwing attributes
SecurityRef.AuthenticationType = "UnT"
SecurityRef.AuthenticationTime = current time (timestamp) - When Consumer request does not contain a Addressing header: generate a Addressing header
Addressing.Action = value of HTTP SOAPAction header
Addressing.To = URL of addressed endpoint
Addressing.MessageID = UUID
Addressing.RelatesTo.InitiatedBy = equal to Addressing.MessageID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 10%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
MuthuKumaranMurugaachari-MSFT 22,381 Reputation points2022-10-26T18:30:55.807+00:00 @Yadav, Krishna Sorry I couldn't follow the question. Can you describe more about the problem/task you are trying to accomplish in detail, current policy, sample request/response? That would help in understanding the issue better.
-
Yadav, Krishna 21 Reputation points
2022-10-27T07:43:42.937+00:00 I want to implement APIM policy for above conditions , considering following SOAP request
<?xml version="1.0" encoding="utf-8"?>
<trackingMessageHeader xmlns="http://wwwxyz.com/xsd/MessageHeader-V1_0" >
<consumerRef>
<userID>string</userID>
<consumerID>string</consumerID>
<customerLocation>string</customerLocation>
</consumerRef>
<securityRef>
<authenticationType>string</authenticationType>
<authenticationTime>2022-11-02T04:55:07.98</authenticationTime>
</securityRef>
</trackingMessageHeader> -
MuthuKumaranMurugaachari-MSFT 22,381 Reputation points
2022-10-27T19:51:51.537+00:00 @Yadav, Krishna For #1, use
check-headerpolicy to enforce specific HTTP header exists and has a specific value; otherwise return HTTP Status code. Refer docs on this.Second condition, you can explore Using Liquid templates with set body (uses Liquid templating language) and transform the request body based on the conditions you need. Checkout few examples in https://azure.microsoft.com/en-us/blog/deep-dive-on-set-body-policy/ and https://www.codit.eu/blog/using-liquid-templates-in-azure-api-management/ that would help in customizing the code.
Feel free to add a comment if you face any issues. Would be happy to assist in answering any questions.
Sign in to comment
Sign in to answer