Authentification WebService

[nicolas46]

Hi,

I will soon develop 10 news WebMethods in a new Livelink WebService.

I 'm trying to understand how authentification works.

My frist question is : When i call AuthenticateUser method, the password is not encrypted, does this mean that I can see my password in the soap envelop ? (using wireshark for exemple).

I don't understand how SSO authentication works...we don't have any token, how others webMethods can works without this token...?

Is there any book in the KC like "Developer's Guide for extending Livelink Workflow" but for the WebServices ?

Thanks.

 

[ggriffit]

There is a very good OT course on this -

http://www.opentext.com/training/coursedetails.html?id=1738

- additionally the WebService documentation at

https://knowledge.opentext.com/knowledge/llisapi.dll/Open/19572224.

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/

 

[appnair]

livelink does not provide means to protect what is being relayed.if your livelink is on https traffic the whole traffic is encrypted using SSL.Old lapi has a product called Secure Conncet which also required you to be on https.

SSO also is done in livelink by putting the livelink webserver under windows authentication(if it is IIS).when a domain user logs into that server then the authenticated user is passed into livelink.This methods is called tunneling.If the method is http then the calls can be seen thru wireshark/fiddler etc.

There is also impersonation in livelink which means you call livelink using a elevated user priv,then this user can act on behalf of any valid user,this is technically impersonation,byut some products call it SSO which IMHO is not the right way to call it.

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

 

[nicolas46]

Thanks appnair !

 

[nicolas46]

Thanks ggriffit , I will take a look to this doc when I will have access to the KC (hope soon...)