I have a SOAP service that I'd like to secure using simple Basic Auth. I have the auth part working properly. But right now, with authentication assertions in place, users are unable to request WSDL. Requests for WSDL require authentication.
Is there a way I can advertise WSDL without the need to for auth, but still keep my authentication assertions for SOAP actions?