User Credential passed in customised tag in soap message

[Former Member]

Hi

We have PO 7.31 exposed a web service. When we use SoapUI, it is successful.

When actual consumer call this web service with basic authentication, the user name and password are passed in customized soap header tag.

e.g.

<soapenv:Header/>

      <CustomerTag>

                  <UserID>xxxx</UserID>

                  <Pwd>*******</Pwd>

      </CustomerTag>

<soapenv:Header/>

Therefore our server does not pick them up. Client side got "401 Unauthorized"

* We do not want to disable user authentication

Anyone has idea how we allow server to authenticate the user ?

Thanks

-Liang

[Private_Member_14913 · Accepted solution]

Hi Liang,

When you are calling the webservice from SOAP UI, at that time also do you get authentication parameters in Custom Tag?

This might be failing bcz PI doesn't expect user id and password in Custom tag.... Ask your actual application to pass the user id and password in url itself.

Thanks,

Hetal

[Former Member · Accepted solution]

Thank replies from both friends.

Now it is clear that the user is authenticated in transport level, in this case, HTTP header, not Soap Header, this is confirmed from Expert from SAP.

I will close the thread

[Former Member]

hi Liang,

did you any kind of authentication from soapUI apart from what you have passed in soap header? is your client using any?

-Naresh