Security is an integral part of SOA, and since WebSphere ESB is at the heart of many SOA solutions, the security of a WebSphere ESB server and its transports is vital to the enterprise systems
that use it. Messaging, such as the JMS implementation provided by WebSphere ESB, is particularly important for business applications because of its reliability, performance, and asynchronous nature.
This article shows you how to implement security with an example using WebSphere ESB V6.1 and a J2EE client container application communicating via JMS messaging.
Updates required for WebSphere Integration Developer debugger to work when security is enabled
According to the tech-note, you have to follow some manual steps to get the debugger to work on a server that has security enabled: http://www-01.ibm.com/support/docview.wss?uid=swg24015747v