SOAP Request
SOAP Request invokes an operation on a service defined by a WSDL resource. The request body is mapped from the workflow, and the response — or the fault the service returns instead — comes back on the Output tab.
The call travels over one of two transports. HTTP(S) posts to the endpoint in the WSDL,
or to an override you supply. JMS sends the request to a queue and correlates the reply
through a temporary queue.
Security is configured across three tabs. TLS secures the transport, WS-Security authenticates the caller with a UsernameToken, and Signing applies an XML Signature to the message.
The activity has eight tabs: Configuration, Endpoint, TLS, WS-Security, Signing, Advanced, Input, and Output.
Configuration
| Field | Required | Description |
|---|---|---|
| Name | Optional | Name of the component. |
| Description | Optional | Description of the component. |
| WSDL | Optional | The WSDL resource that defines the service. |
| Service | Optional | WSDL service name. Optional if unambiguous. |
| Port | Optional | WSDL port or binding. Optional if unambiguous. |
| Operation | Optional | The operation to invoke. |
| SOAP Version | Optional | Auto (from WSDL), SOAP 1.1, or SOAP 1.2. Defaults to Auto (from WSDL). |
| Transport | Optional | HTTP(S) or JMS. Defaults to HTTP(S). |
Service and Port may be left blank when the WSDL declares only one of each. SOAP Version is taken from the WSDL binding unless overridden.
Endpoint
| Field | Required | Description |
|---|---|---|
| Endpoint URL (override) | Optional | Overrides the WSDL soap:address. Mapping and vault values are supported. |
| Basic Auth Username | Optional | Username for HTTP Basic authentication. |
| Basic Auth Password | Optional | Password for HTTP Basic authentication. |
| Connect Timeout (ms) | Optional | Defaults to 15000. |
| Read / Reply Timeout (ms) | Optional | HTTP read timeout, or JMS request-reply wait timeout. Defaults to 30000. |
| JMS Connection | Optional | The JMS connection resource, for SOAP-over-JMS. |
| JMS Destination | Optional | Request queue. The reply arrives via a temporary queue and correlation. |
JMS Connection and JMS Destination apply when Transport is JMS. The remaining
fields apply to HTTP(S), except Read / Reply Timeout (ms), which bounds the wait on
both transports.
TLS
| Field | Required | Description |
|---|---|---|
| Configure TLS / mTLS | Optional | Enables the settings below. Defaults to cleared. |
| Server Certificate Trust | Optional | System Trust (public CAs), Certificate Resource, or Trust All (dev/test only). Defaults to System Trust (public CAs). |
| Verify Server Hostname | Optional | Verify that the SOAP endpoint hostname matches the server certificate. Defaults to selected. |
| Server Trust Certificate | Optional | Certificate resource containing the CA or certificate used to validate the SOAP server. |
| Client Identity Certificate (mTLS) | Optional | Certificate resource containing the client certificate and private key presented to the SOAP server. |
HTTPS uses system trust automatically. Enable Configure TLS / mTLS only to configure certificate trust, mTLS, or hostname verification.
Trust All (dev/test only) skips server certificate validation. Keep Verify Server
Hostname enabled outside controlled testing.
WS-Security
| Field | Required | Description |
|---|---|---|
| Authentication | Optional | None or UsernameToken. Defaults to None. |
| Username | Optional | Username sent in the WS-Security UsernameToken. |
| Password | Optional | Password resolved from a variable or vault-backed value. |
| Password Type | Optional | Password Text or Password Digest. Defaults to Password Text. |
| Add Timestamp | Optional | Add a WS-Security timestamp to limit the validity period of the request. Defaults to cleared. |
| Timestamp Validity (seconds) | Optional | How long the generated WS-Security timestamp remains valid. Defaults to 300. |
| Timestamp ID | Optional | Timestamp identifier. Leave empty unless required for interoperability or signing. |
| Must Understand | Optional | Require the receiving SOAP service to process the WS-Security header or return a fault. Defaults to cleared. |
Password Digest avoids transmitting the plaintext password, and includes a nonce and
creation time.
Signing
| Field | Required | Description |
|---|---|---|
| Sign SOAP Message | Optional | Apply a WS-Security XML Signature to the outbound SOAP message. Defaults to cleared. |
| Signing Certificate | Optional | Certificate resource containing the signing certificate and private key. |
| Sign SOAP Body | Optional | Include the SOAP Body in the XML Signature. Defaults to selected. |
| Add Signature Timestamp | Optional | Add a timestamp to the signed WS-Security header. Defaults to selected. |
| Sign Timestamp | Optional | Include the generated timestamp in the XML Signature. Defaults to selected. |
| Timestamp Validity (seconds) | Optional | How long the signature timestamp remains valid. Defaults to 300. |
Advanced
| Field | Required | Description |
|---|---|---|
| Custom SOAP Headers | Optional | Additional namespaced headers, for example WS-Addressing. |
Input
| Field | Required | Description |
|---|---|---|
| Inputs | Optional | The request body, from the WSDL operation. |
The shape of the request body is not fixed by the activity. It is derived from the WSDL operation selected in Configuration.
Output
The activity returns a soapResponse object holding response metadata and the decoded body.
| Field | Data Type | Description |
|---|---|---|
| body | Object | The WSDL operation response body. |
| fault | Object | The SOAP fault returned by the service, when there is one. |
| statusCode | Integer | Transport status code for the call. |
| endpoint | String | The endpoint the request was sent to. |
| transport | String | http or jms. |
| transportMetadata | Object | Transport-specific metadata for the call. |
fault
| Field | Data Type | Description |
|---|---|---|
| code | String | Fault code. |
| subCode | String | SOAP 1.2 fault subcode. |
| reason | String | Fault reason. |
| actor | String | SOAP 1.1 faultactor or SOAP 1.2 Role. |
| node | String | The node that generated the fault. |
| detail | String | Fault detail. |