biztalk - 如何安全地设置 SB-Messaging 适配器凭据？

Question

我正在开发一个解决方案，其中涉及使用 BizTalk SB-Messaging 适配器从 Azure 服务总线队列读取消息。我正在使用 BizTalk 部署框架来部署应用程序，无需用户输入。

某些适配器可以选择使用单点登录数据库获取外部系统的凭据(选项“使用 SSO”)。 SB-Messaging 适配器没有此功能，并且需要在 UI 中输入服务(在本例中为队列)的 ACS(访问控制服务)或 SAS(共享访问 key )凭据。 BTDF 还可以通过在绑定(bind)文件中输入它们来设置它们(这些特定属性上有一个属性 vt="[number]" ，这会导致它们被忽略，除非被覆盖，大概是为了阻止开发人员以明文形式存储凭据。

如何设置服务总线凭据而不以明文形式保存？对于这种情况，我认为写入磁盘或保存在源代码管理中的任何数据都是明文，这意味着创建包含这些凭据的绑定(bind)文件是 Not Acceptable 。

我希望它能正常工作，就像支持 SSO 的适配器一样。这可能吗？

(顺便说一句，任何知道为什么微软显然不费心去实现这一点的人都欢迎发表他们的观点)

Answer 1

是的，大多数适配器都支持 SSO Affiliate 应用程序或使用单点登录作为用户名凭据，但是它们都不支持 ACS 的 SSO Affiliate，SAS 或代理设置(参见下表)

似乎不支持用户名凭据的 SSO 关联设置的适配器要么是非常旧的适配器，要么是最新的适配器。

没有针对 ACS、SAS 或代理设置的 SSO 关联设置，他们似乎没有考虑这样做。

所以回答你的问题。不，看起来不可能将此适配器与 SSO Affiliate 结合使用，因为您甚至无法像使用 WCF 适配器那样添加自定义行为，这就是我们实现 oAuth 行为以使用 SSO 的方式附属机构获取 WCF-WebHttp 到 Salesforce 的凭据和 secret 。

另请参阅BizTalk Server 2013 R2: Adapters without Single Sign-On Capability和 BizTalk Server 2013 R2: Adapters without Single Sign-On Capability on Technet

使用单点登录或 SSO 附属机构 (BizTalk 2013R2)

+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| Adapter             | Receive |             |       |       |               | Send        |       |       |               |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
|                     | Use     | SSO         | ACS/  | Proxy | Endpoint      | SSO         | ACS/  | Proxy | Endpoint      |
|                     |   SSO   |   Affiliate |   SAS |       |   Behaviour   |   Affiliate |   SAS |       |   Behaviour   |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| File                | No      | No          | -     | -     | -             | No          | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| FTP                 | No      | Yes         | -     | No    | -             | Yes         | -     | No    | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| HTTP                | Yes     | -           | -     | -     | -             | Yes         | -     | No    | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| MQSeries            | No      | -           | -     | -     | -             | Yes         | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| MSMQ                | No      | No          | -     | -     | -             | No          | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| POP3                | No      | No          | -     | -     | -             | -           | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| SB-Messaging        | No      | -           | No    | -     | -             | -           | No    | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| SFTP                | No      | No          | -     | No    | -             | No          | -     | No    | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| SMTP                | -       | -           | -     | -     | -             | No          | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| SOAP                | Yes     | -           | -     | -     | -             | Yes         | -     | No    | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| SQL                 | No      | No          | -     | -     | -             | No          | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-BasicHttp       | Yes     | -           | -     | -     | in WCF-Custom | Yes         | No    | No    | in WCF-Custom |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-BasicHttpRelay  | No      | -           | No    | -     | No            | Yes         | No    | No    | No            |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-Custom          | Yes     | Yes         | -     | -     | Yes           | Yes         | No    | No    | Yes           |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-CustomIsolated  | Yes     | Yes         | -     | -     | -             | -           | -     | -     | -             |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-NetMsmq         | -       | -           | -     | -     | in WCF-Custom | Yes         | -     | -     | in WCF-Custom |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-NetNamedPipe    | Yes     | -           | -     | -     | in WCF-Custom | -           | -     | -     | in WCF-Custom |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-NetTcp          | Yes     | -           | -     | -     | in WCF-Custom | Yes         | -     | -     | in WCF-Custom |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-NetTcpRelay     | No      | -           | No    | -     | -             | Yes         | No    | -     | No            |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-OracleDB        | Yes     | Yes         | -     | -     | Yes           | Yes         | -     | No    | Yes           |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-OracleEBS       | Yes     | Yes         | -     | -     | Yes           | Yes         | -     | No    | Yes           |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-SQL             | Yes     | Yes         | -     | -     | Yes           | Yes         | -     | No    | Yes           |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-WebHttp         | Yes     | -           | -     | -     | Yes           | Yes         | No    | No    | Yes           |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| WCF-WSHttp          | Yes     | -           | -     | -     | in WCF-Custom | Yes         | No    | No    | in WCF-Custom |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+
| Windows             | No      | No          | -     | -     | -             | No          | -     | -     | -             |
|   Sharepoint Server |         |             |       |       |               |             |       |       |               |
+---------------------+---------+-------------+-------+-------+---------------+-------------+-------+-------+---------------+