Web service security

[anesh_kumar]

Hi Experts

I have created a web service in ECC6

Could any one let me know how to provide security to web services in sap netweaver ( abap stack only )

thanks

[Former Member]

Hello,

While definiing Web Service (SE37/SE80), you can attach suitable security profile to the Web Service definition:

(1) High - Authentication using certificates and transport guarantees

(2) Low - Authentication using UserID and password, no transport guarantee

(3) Medium - Authentication using UserID and password and transport guarantee

(4) No - No authorization and no transport guarantee.

During the creation of end point using SOAMANAGER, you can update this with correct security you want. If you are using User ID and Password, you attach a Web Service Consumer role to the Service user accout as a copy of SAP_BC_WEBSERVICE_CONSUMER. You can provide SOAP Run Time Security using object S_SERVICE for the specific web service. Finally, you can provide Application Access Security to the Service Account and attach it to the same role.

Thanks,

Venu

[anesh_kumar]

Hi

thanks for the reply

well in my case the web service will act as a service provider

could you please let me know the detail procedure on how to maintain security using the

High - Authentication using certificates and transport guarantees and

Medium - Authentication using UserID and password and transport guarantee

thanks