Web Service Runtime Configuration 
You can configure security settings for the service provider and service consumer for the runtime of Web services.
You make pre-settings for this in the Enterprise Services Repository for service interfaces and during the Web service design in the AS Java development environment.
You can make the following security settings for the service provider:
Transport Level
HTTPS
HTTP Authentication
The authentication information is found in the HTTP header.
User Name/Password (Basic)
X.509 Certificate
Logon Ticket
Message Authentication
The authentication information is found in the SOAP header.
User Name/Password (Basic)
X.509 Certificate
SAML Assertion
Message Security/WS Security
The security settings affect the SOAP document.
WS secure conversion (version February 2005)
Add/require signature
Add/require encryption
You choose one of the predefined security settings during the runtime configuration for the service consumer.