Guide for Securing Web Services with WebSphere Application Server?
<p>I'm a WS-Security newbie who has been tasked with applying WS-Security to our existing SOAP Web Services. Our application runs on WebSphere Application Server 8.5, and we're using Full Profile (not Liberty).</p>

<p>Features that I'm to incorporate include:</p>

<ul>
<li>Adding Message ID, Service Request, Timestamps, (optional) SAML assertions, (optional) Sequence Numbers to SOAP messages</li>
<li>Digital signatures on SOAP messages using X.509 certificates</li>
<li>Authentication using X.509 certificates</li>
</ul>

<p>I have browsed the <em>WebSphere Application Server V8.5 Administration and Configuration Guide for the Full Profile</em> IBM Redbook(<a href="http://www.redbooks.ibm.com/abstracts/sg248056.html" rel="nofollow">http://www.redbooks.ibm.com/abstracts/sg248056.html</a>), and I've gone through some tutorials and samples in the <em>IBM WebSphere Application Server V7.0 Web Services Guide</em> IBM Redbook (<a href="http://www.redbooks.ibm.com/abstracts/sg247758.html" rel="nofollow">http://www.redbooks.ibm.com/abstracts/sg247758.html</a>), but I still feel like I'm in over my head with how to configure WAS to support these features.</p>

<p>Does anyone have recommended references -- books, code samples, YouTube videos, etc. -- for how I might come up to speed fairly quickly on at least some of these topics?</p>