I’ve created a standalone EAR deployed on WebSphere that simply makes a SOAP call to TRIRIGA’s Connector for Business Applications (CBA). From the log file, it seems as though the basic authentication header is being ignored by TRIRIGA.
When deployed on WebSphere Liberty with the same version of TRIRIGA, I do not have this unauthorized problem, so it seems to be a security configuration disparity between WebSphere 22.214.171.124 traditional and WebSphere Liberty (tested on 126.96.36.199 and 188.8.131.52).
From the SecurityLogger, the platform is correctly identifying the user. However, the status is Failed. Can anyone shed some ideas as to why there is a difference in security settings between Liberty and traditional? And how can I configure WebSphere traditional to allow basic authentication?