Recommended WS Security Scenarios
Use
We recommend a number of scenarios that combine authentication and transport guarantee mechanisms. The table below provides you with assistance in deciding which scenario is useful when.
The scenarios are divided by the logon mechanisms
used for logging on to the WS provider system. Some scenarios use a fixed
service user, while with others, the identity of the user logged on to the WS
consumer system is propagated to the WS provider system (Single Sign-On).
Single Sign-On is implemented using a number of techniques, depending on the
authentication method
in use.
Web Service messages can be passed through any number of connections and, potentially, a large number of intermediary stations. Point-to-point or connection-oriented security at the HTTP transport level may be insufficient or inappropriate for supporting this decoupled interaction. Security at the message level, on the other hand, guarantees security between the end points that is independent of the security used between the intermediary stations.
Decision Matrix
Scenario (Authentication + Connection Security) |
Single Sign-On (Propagation of the Identity of the WS User) |
Security at Message Level |
System Compatibility |
X |
X |
● SAP NetWeaver AS ABAP 7.0 |
|
|
|
● SAP NetWeaver Web AS 2004 ● SAP NetWeaver Application Server 7.0 |
|
X |
|
● SAP NetWeaver Web AS 2004 ● SAP NetWeaver Application Server 7.0 |
|
|
|
● SAP NetWeaver Web AS 2004 ● SAP NetWeaver Application Server 7.0 |
|
|
X |
● SAP NetWeaver AS ABAP 7.0 |
|
WS-Security: Signature Authentication & Asymmetrical Encryption |
|
X |
● SAP NetWeaver Web AS 2004 ● SAP NetWeaver Application Server 7.0 |
Prerequisites
In all of the scenarios, the WS provider system must trust the credentials of the WS consumer system. The type of trust configuration depends on the security mechanisms in use.
Scenario Prerequisites