SOAP Sender Authentication - What user authorizations are required in XI?

[Former Member]

Hi Experts,

When exposing an XI webservice to an external WS client, the WS client needs to provide the user id and password in the webapplication while sending the SOAP request to XI.

1. Could you tell me what authorizations this particular user should have which needs to be created in XI?

2. Is this the best practice to be used in B2B scenarios or there are other means of authentication too?

Thanks,

Shobhit

[prateek · Accepted solution]

Use XIAPPLUSER/PIAPPLUSER or any user with the roles similar to these users.

For B2B scenarios, it is better to enable SSL on ur java engine and talk over https.

Regards,

Prateek

[Former Member · Accepted solution]

Thanks Sai / Prateek,

There is a webdispatcher in place (before the message reaches XI) which converts the https SOAP request to a http SOAP request, and hence we are not using the XI/SOAP adapter functionality of HTTPS with authentication.

Since there are many partners which will be sending the SOAP request, I can create specific user/password combination for individual partners with the xi_adapter_soap_message role so that the request gets authenticated. Is this a good approach?

Regards,

Shobhit

[Former Member]

Hi Swarup,

To provide the soap adapter is the best use in case of B2B communication and also to do this further.../

The following link will help in detail with SOAP adapter..

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a2202...

Regards

Sai

Reward with points if helpful