Authentication for the Web Service Homepage

The Web Service Homepage provides the following services to its user :

·        List of all Web services deployed on the SAP J2EE Engine

·        Documentation on the Web service

·        WSDL documents

·        Test options

Since there is no authentication option for the homepage at the moment, SAP recommends that you deactivate the application in live systems.

Deployed Web Services can be viewed by unauthorized users. Denial-of-service attacks are possible.

Use the shell command stop_app sap.com/com.sap.engine.services.webservices.tool to deactivate the application. For further information concerning the shell command, see the chapter Deploy.