title: Enable ws-security for proxy service
body: <p>Currently we have enabled ws-security in wso2 esb using policy file and role based authorization using Active Directory. </p>
  
  <p>We would like to transition some of these services to wso2 api manager and implement the same security model.</p>
  
  <p>How do we secure these APIs (that are facing web service client and not the backend web service) using ws-security on api manager? </p>