SOAP message security

[former_member229310]

Hello,

1) Could you please suggest best way to handle PI web service with regard to security. We are exposing PI to use web services from external system.As the external system are not part of our DMZ and do not reside in our network what is the best approach to configure the SOAP sender and receiver channels.

2) Also When we give the WSDL to external parties normally the PI host would be local would there be any issues wrt security should the network team open up ports for them or map the local host to public host.

Thanks.

[Former Member · Accepted solution]

Hi,

you are using SOAP receiver adapter to consume third party webservice. Third party webservice is provided client certificate. Import the third party certificate in the netweaver stack and reference that certificate in the soap receiver adapter using the option certifiicate authentication.

please refer help document

http://help.sap.com/saphelp_nw04/helpdata/en/56/992d4142badb2be10000000a1550b0/frameset.htm

Soap Sender:

You need to generate Server&Client Certificate in STRUST (if empty) and distribute to 3rdParty System.

For enable Https, you need to activate (if is disactive) https service in SMICM transaction

regards,

ganesh.

[Former Member]

About Soap Security, refer to the below documents & help, about SSL configuration for SOAP Adapter (Security Checks):

http://help.sap.com/saphelp_nw04/helpdata/en/fc/5ad93f130f9215e10000000a155106/content.htm

HTTP & SSL

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/content.htm

How to use Client Authentication with SOAP Adapter

http://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/3721

[former_member229310]

Thanks for the reply.

Can I use the WS adapter in the place of SOAP adapter if I do not have any attachments. If the external party adhere to send using OASIS WS then can I make use of SAMLfor the security purpose. Is this advisable.

Thanks again.

[baskar_gopalakrishnan2]

SOAP adapter supports axis protocol too. If the external system expects SAML security then WS adapter is the only way to go. I believe WS adapter can be used for both direct connection and through integration server. Direct connection is mainly to connect two web service runtime systems of either abap or java. You might want to go and search sdn for ws adapter. PLus WS adapter supports WS-RM protocol standard. But SOAP adapter is most widely used than WS adapter.

Refer this link

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1082dd33-738c-2a10-d8b3-ce07a158e...