Correct URL to expose a Web Service from XI with User Authentication

[Former Member]

Hi All,

I exposed my outbound synchronous interface as a webservice.

I have also defined a SOAP sender adapter.

As from some previous posts, to test the webservice without user authentication isnt possible.

Well, then my question is, what URL shall i write to test the webservice such that it caters to the user authentication as well.

Some suggestions are: 1) http://<user>:<passwd>@<hostname>:<port>/XISOAPAdapter/MessageServlet?channel=:<service>:<communicat... channel>

2)

http://<hostname>:<port>/XISOAPAdapter/MessageServlet?channel=:<service>:<communication channel>&amp;sap-user=<username>&amp;sap-password=<password>

3) etc..

Both of these dosent seem to work.

Please post the correct URL if somebody knows it.

Thanks,

Varun

[bhavesh_kantilal · Accepted solution]

Check the blog by Stefan . The URL in his blog will allow you to append sap-user and sap-password to the URL.

/people/stefan.grube/blog/2006/09/21/using-the-soap-inbound-channel-of-the-integration-engine

The URL should be,

<b>http://<server>:<ABAP-port>/sap/xi/engine?type=entry&version=3.0&Sender.Service=<YourService>&Interface=<YourNamespace>%5E<YourInterface>&sap-user=username&sap-password=password</b>

Regards

Bhavesh

[Former Member]

Thanks

[Former Member]

Hi Varun,

The URL should take the form (1) as you have suggested.

Make sure you set the user/password up in XI in transaction SU01. The user will need the role SAP_XI_APPL_SERV_USER

Cheers

Colin.

[Former Member]

Have you thought about using SSL?

Inbound Security Checks

Select the HTTP security level for inbound messages:

&#9679; HTTP

&#9679; HTTPS without client authentication

&#9679; HTTPS with client authentication

See also: SAP Security Guide XI, HTTP and SSL, under Enforcing HTTP Security for Incoming Messages

Security Parameters

&#9679; If you want to make additional settings for security in the relevant sender agreement on the Integration Server or in the PCK, set the Select Security Profile indicator. See also: Security Settings for the Sender SOAP Adapter.

If you set the indicator, there must be exactly one sender agreement for the defined communication channel.

&#9679; Under Security Profile, select whether you want to use Web Services Security or S/MIME.

&#9679; Also specify the Persist Duration for the messages.

http://help.sap.com/saphelp_nw04/helpdata/en/fc/5ad93f130f9215e10000000a155106/frameset.htm