soapirs

IRS ACA 1095B BulkRequestTransmitter: Invalid WS Security Header - SOAP UI


I am trying to Invoke IRS ACA 1095 B Ws through SOAP UI. I have configured Keystore in SOAP UI which when imported says OK. I have signed the 3 elements referring the IRS Doc, ACABusinessHeader, ACATransmitterManifestReqDtl and Timestamp. I have tried with and without, Gzip/ Wsa Header/ Attachment/ MTOM still for a simple SOAP Request without any file attachment I am having :

The WS Security Header in the message is invalid. Please review the transmission instructions outlined in Section 5 of the AIR Submission Composition and Reference Guide located at https://www.irs.gov/for-Tax-Pros/Software-Developers/Information-Returns/Affordable-Care-Act-Information-Return-AIR-Program, correct any issues, and try again.

Error Code: TPE 1122.

I have attached the complete SOAP Ui Request Message.

Any sort of Help is appreciated.

--->

enter code here



 POST https://la.www4.irs.gov/airp/aca/a2a/1095BC_Transmission_AATS2016 HTTP/1.1
    Content-Encoding: gzip
    Accept-Encoding: gzip,deflate
    Content-Type: multipart/related; type="application/xop+xml"; start="<rootpart@soapui.org>"; start-info="text/xml"; boundary="----=_Part_0_1488514502.1456157000203"
    SOAPAction: "BulkRequestTransmitter"
    MIME-Version: 1.0
    Transfer-Encoding: chunked
    Host: la.www4.irs.gov
    Connection: Keep-Alive
    User-Agent: Apache-HttpClient/4.1.1 (java 1.5)



    <soapenv:Envelope xmlns:oas1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:us:gov:treasury:irs:msg:acabusinessheader" xmlns:urn1="urn:us:gov:treasury:irs:ext:aca:air:7.0" xmlns:urn2="urn:us:gov:treasury:irs:common" xmlns:urn3="urn:us:gov:treasury:irs:msg:acasecurityheader" xmlns:urn4="urn:us:gov:treasury:irs:msg:irsacabulkrequesttransmitter" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xd="http://www.w3.org/2000/09/xmldsig#">
       <soapenv:Header xmlns:wsa="http://www.w3.org/2005/08/addressing">
          <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">

             <ds:Signature Id="SIG-F8EA5798DFE03264EF145615675816614" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:SignedInfo>
                   <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                      <ec:InclusiveNamespaces PrefixList="oas1 soapenv urn urn1 urn2 urn3 urn4 wsu xd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                   </ds:CanonicalizationMethod>
                   <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
                   <ds:Reference URI="#id-E9877CA7A36541AA6A1455820267635274">
                      <ds:Transforms>
                         <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                            <ec:InclusiveNamespaces PrefixList="oas1 soapenv urn1 urn2 urn3 urn4 xd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                         </ds:Transform>
                      </ds:Transforms>
                      <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                      <ds:DigestValue>REDACTED</ds:DigestValue>
                   </ds:Reference>
                   <ds:Reference URI="#id-E9877CA7A36541AA6A1455820267635275">
                      <ds:Transforms>
                         <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                            <ec:InclusiveNamespaces PrefixList="oas1 soapenv urn urn2 urn3 urn4 xd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                         </ds:Transform>
                      </ds:Transforms>
                      <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                      <ds:DigestValue>REDACTED</ds:DigestValue>
                   </ds:Reference>
                   <ds:Reference URI="#id-E9877CA7A36541AA6A1455820267635276">
                      <ds:Transforms>
                         <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                            <ec:InclusiveNamespaces PrefixList="oas1 soapenv urn urn1 urn2 urn3 urn4 xd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                         </ds:Transform>
                      </ds:Transforms>
                      <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                      <ds:DigestValue>REDACTED</ds:DigestValue>
                   </ds:Reference>
                </ds:SignedInfo>
                <ds:SignatureValue>REDACTED</ds:SignatureValue>
                <ds:KeyInfo Id="RE-Dacted">
                   <wsse:SecurityTokenReference wsu:Id="STR-abcdefghijklmnopqredacted">
                      <wsse:KeyIdentifier EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3">REDACTED</wsse:KeyIdentifier>
                   </wsse:SecurityTokenReference>
                </ds:KeyInfo>
             </ds:Signature>
          </wsse:Security>
          <urn3:ACASecurityHeader/>
          <urn:ACABusinessHeader wsu:Id="id-E9877CA7A36541AA6A1455820267635274">
             <urn1:UniqueTransmissionId>abcd-efgh:1234</urn1:UniqueTransmissionId>
             <urn2:Timestamp>2016-02-17T15:17:47Z</urn2:Timestamp>
          </urn:ACABusinessHeader>
          <urn1:ACATransmitterManifestReqDtl wsu:Id="id-E9877CA7A36541AA6A1455820267635275">
             <urn1:PriorYearDataInd>0</urn1:PriorYearDataInd>
             <urn2:EIN>12-34567</urn2:EIN>
             <urn1:TestFileCd>T</urn1:TestFileCd>
             <urn1:TransmitterNameGrp>
                <urn1:BusinessNameLine1Txt>SOME VALUE</urn1:BusinessNameLine1Txt>
             </urn1:TransmitterNameGrp>
             <urn1:CompanyInformationGrp>
                <urn1:MailingAddressGrp>
                   <urn1:USAddressGrp>
                      <urn1:AddressLine1Txt>SOME ADRESS</urn1:AddressLine1Txt>
                      <urn2:CityNm>SOME CITY</urn2:CityNm>
                      <urn1:USStateCd>AB</urn1:USStateCd>
                      <urn2:USZIPCd>12345</urn2:USZIPCd>
                      <urn2:USZIPExtensionCd>6789</urn2:USZIPExtensionCd>
                   </urn1:USAddressGrp>
                </urn1:MailingAddressGrp>
                <urn1:ContactNameGrp>
                   <urn2:PersonFirstNm>First</urn2:PersonFirstNm>
                   <urn2:PersonLastNm>Last</urn2:PersonLastNm>
                </urn1:ContactNameGrp>
                <urn1:ContactPhoneNum>123-456-7890</urn1:ContactPhoneNum>
             </urn1:CompanyInformationGrp>
             <urn1:VendorInformationGrp>
                <urn1:VendorCd>Some Vendor</urn1:VendorCd>
                <urn1:ContactNameGrp>
                   <urn2:PersonFirstNm>First</urn2:PersonFirstNm>
                   <urn2:PersonLastNm>Last</urn2:PersonLastNm>
                </urn1:ContactNameGrp>
                <urn1:ContactPhoneNum>Phone</urn1:ContactPhoneNum>
             </urn1:VendorInformationGrp>
             <urn1:TotalPayeeRecordCnt>1</urn1:TotalPayeeRecordCnt>
             <urn1:TotalPayerRecordCnt>1</urn1:TotalPayerRecordCnt>
             <urn1:SoftwareId>A12345678</urn1:SoftwareId>
             <urn1:FormTypeCd>1094-1095B</urn1:FormTypeCd>
             <urn2:BinaryFormatCd>application/xml</urn2:BinaryFormatCd>
             <urn2:ChecksumAugmentationNum>garbage-value</urn2:ChecksumAugmentationNum>
             <urn2:AttachmentByteSizeNum>1234</urn2:AttachmentByteSizeNum>
             <urn1:DocumentSystemFileNm>some</urn1:DocumentSystemFileNm>
          </urn1:ACATransmitterManifestReqDtl>
          <wsu:Timestamp wsu:Id="id-E9877CA7A36541AA6A1455820267635276">
             <wsu:Created>2016-02-17T15:41:09.678Z</wsu:Created>
             <wsu:Expires>2016-02-20T10:21:09.678Z</wsu:Expires>
          </wsu:Timestamp>
          <wsa:Action>BulkRequestTransmitter</wsa:Action>
       </soapenv:Header>
       <soapenv:Body>
          <urn4:ACABulkRequestTransmitter>
             <urn2:BulkExchangeFile>
             </urn2:BulkExchangeFile>
          </urn4:ACABulkRequestTransmitter>
       </soapenv:Body>
    </soapenv:Envelope>

Solution

  • I see the wsu:Timestamp is outside the wsse:Security, I have attached outgoing WS-Security configuration of my working SOAP UI, cross check with yours.

    After applying the outgoing headers, submit the request as is and do not format the request!

    My outgoing WS-Security configuration of SOAP UI

    My outgoing WS-Security configuration of SOAP UI-TimeStamp