Problem with webservice security in WAS

[Former Member]

Hello Everybody,

I want tp implement SSO between Windows domain and WAS server. So, for that i am using Kerberos ticket.

But, I have one question in it. I am passing kerberos ticket in SOAP Header instead of HTTP header, because i need to follow WS standards. But, can WAS server's LoginContext accept ticket/token from SOAP Header instead of HTTP header? Can we pass ticket or token in SOAP header?

If yes, then how can we configure that?

Please give me reply on this, its very urgent.

Tahnks in Advance,

Bhavik

[Former Member · Accepted solution]

Hello Bhavik,

Kerberos authentication through the SOAP header is not supported.

To provide SSO with Windows Integrated Authentication for EP6 you may use IisProxy ISAPI module.

You may use IisProxy for any transport layer Windows Integrated Authentication method - Kerberos, NTLM or NTLMv2.

Regards,

Jivko

[Former Member · Accepted solution]

Hi Jivko,

Could you describe about lisProxy in more detail or give me some material related to it? I'm also doing some research work about the security of Web Service. I've done some work according the SAP library. But it made no difference.So now I'm eager to find some valuable material to give me some guide.Can you help me? Thanks!