Passing User Security Credentials through BizTalk 1

[stevenharrisesquire]

Hi there,

We are considering implementing Biztalk Server as an integration layer between our applications/databases within our organisation.

One requirement of this is that the integration layer keeps the security credenitals of the person accessing the integration layer through the local application.

For instance, if a User needs to access a Finance system from a Booking system, then they will, in the background, be using the BizTalk integration layer. However, they need explicit access given to them in order to access the Finance system, irrespective of their privileges on either the Booking system or the BizTalk system.

Is this possible?
(And if so, how is it done?)

Thanks for your help,

Kind regards,

Steve Harris
CENTRO
England.

 

[pmmoreira]

Biztalk Server runs under the account's you specify when you configure The Messaging Service and the XLang Com+.

In this context, I know no other way than try to configure Com+ to run under the credentials of the current user.

You will have access to the com+ security context.

Even if you have understandable concerns about the security of your server, you can create a com+ app just for this purpose.

If you need access to protected resources under your app you can impersonate an account wich has.

Hope I wan't to vague... I'm sorry but I can´t help you with the details... filled agenda

 

[stevenharrisesquire]

Thanks,

One other idea is to use the capabilities of Active Directory to authenticate user credentials through the various integrated systems.