Configuring Transport Authentication with User ID/Password 

Use

The AS Java technology stack of SAP NetWeaver enables you to configure WS access authentication at the HTTP transport level with a user ID and a password. You use the SAP NetWeaver Administrator (NWA) tool to configure the AS Java system for using transport level authentication with user ID and password.

For this access scenario, the WS consumer provides a user ID and password in the HTTP header, based on which an AS Java WS provider can determine the WS caller and authorize access.

The password for transport level authentication is transported in base 64 format in the HTTP header. Therefore, we recommend that you use SSL to maintain the confidentiality and integrity of the user credentials.

Procedure

...

To configure a WS service endpoint  for providing a WS

                            a.      Using the WS Configuration functions in NWA select the Service Definition, the corresponding Service Endpoint to configure and choose the Security management functions for the selected Service Endpoint.

                            b.      Switch to Edit mode.

                            c.      Use the Transport Protocol options to configure the use of HTTP or HTTPS.

                            d.      Use the checkbox for HTTP Authentication to enable the use of  User ID/Password for authentication of WS consumers.

By default, .Net WS clients use the digest type of authentication with user ID and password. This authentication type is not supported for providing Web Services by SAP NetWeaver, therefore when using .Net WS clients you have to modify their default configuration to use basic authentication with user ID and password.

To configure a WS logical port for consuming a WS

...

                            a.      Using the WS Clients Configuration in NWA, select the Proxy Definition, the corresponding Logical Port to configure and choose the Security management functions for the selected logical port.

                            b.      Switch to Edit mode.

                            c.      Using the Authentication dropdown menu list choose HTTP Authentication.

                            d.      Choose the radio buttons for User ID and Password authentication. You can use basic or digest authentication types for consuming a WS.

                                                  i.       Use the Details button to enter the user ID and password for the authentication.

See also:

Configuring Web Services and Web Service Clients in the SAP NetWeaver Administrator