Web Services uses the user administration and authentication mechanisms provided by the SAP NetWeaver platform, in particular those of the SAP NetWeaver Application Servers ABAP and Java. Therefore, the security recommendations and guidelines for user administration and authentication as described in the SAP NetWeaver Application Server ABAP Security Guide also apply to Web Services.