cancel
Showing results for 
Search instead for 
Did you mean: 

Secure Web Services

Former Member
0 Kudos
251

Hi,

Our systems use web services to communicate between the back-end and front-end (made with Web Dynpro). I want to secure the web services at message level.

Do I have to buy SNC licenses?

What if security is implemented at transportation level?

Thank you,

Sergio Fierens BAyo.

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi Bayo,

If you want to provide security options to your webservice then there are two options.

1. Transportation security

2. Messege security

For, transportation security you can use HTTPS protocol.

and if you want to provide messege security then you have to choose Authentication as Document authentication.

In this Document authentication, you have two options:

1. Basic authentication- which provides authentication based upon fixed username and this will pass with your messege in soap instead of HTTP header.

2. X509 certificate: If you want to send data in encripted form then you can use this option. This will encript your data using X509 certificate.

If you want only user authentication using HTTP header then you can use authentication as HTTP authentication which also has above types, basic and X509 certificate.

It also provides one more functionality called SAP logon ticket, for the Single Sign on.

You can set all these properties under Webservice Configuration file. Here you have one option security under the config1 node.

Here you can set all these properties.

Let me know the status.

Regards,

Bhavik

Former Member
0 Kudos

Bhavik,

Thank you for your reply.

What I want to know is if I have to buy aditional components (SAP Crypto Software) to add transportation security using HTTPS protocol to web services, or Document authentication with X509 certificates.

I do not have SAP Crypto Software, can I secure my web services without it?

Thank you,

Sergio Fierens Bayo.

Former Member
0 Kudos

Hi Bayo,

You can get required libraries from SAP market place and the unlimited strength crypto policy files (Sun JDK: http://java.sun.com/j2se/1.4.2/download.html IBM JDK:https://www6.software.ibm.com/dl/jcesdk/jcesdk-p)

Download it, its free and then install on your server.

Regards,

Bhavik

Former Member
0 Kudos

Hi Bayo,

If you have solve your problem then please close this thread.

Bhavik