Re: Authenticating user over the internet

KY wrote:

Hi,
I am using custom authentication using SOAP headers to authenticate
users of a web service. I cannot use windows authentication as our
client applications need not in the same domain as that of server.
Also, I don't want to use WSE. I am sending user name and password in
the SOAP header in clear text. But I don't want to send username and
password in cleartext form. What is the best way to send username and
password over the internet? Thanks, Kalyani

You can encrypt the entire SOAP payload using a SoapExtension (not
WSE). Read:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspne
t/html/asp09272001.asp

and
http://www.gotdotnet.com/team/rhoward/EncryptionExtension.zip



--
Deepak Shenoy
http://shenoyatwork.blogspot.com
.

Relevant Pages

  • Re: Adding security to a web service without using WSE
    ... How to pass Soap headers for the application level security? ... > authentication such as basic, digest, integrated and certificate ... SSL and IPSec can be used to encrypt SOAP messages on ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Adding security to a web service without using WSE
    ... implement the WS-Security specification yourself on the caller's side. ... How to pass Soap headers for the application level security? ... > authentication such as basic, digest, integrated and certificate ...
    (microsoft.public.dotnet.framework.webservices)
  • Authenticating user over the internet
    ... I am using custom authentication using SOAP headers to authenticate users of ... I cannot use windows authentication as our client ... What is the best way to send username and password over the internet? ...
    (microsoft.public.dotnet.framework.webservices)
  • Authenticating user over the internet
    ... I am using custom authentication using SOAP headers to authenticate users of ... I cannot use windows authentication as our client ... What is the best way to send username and password over the internet? ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • RE: UserName token Access denied smart client
    ... I think what is happening is that you are trying to get a WSE username ... token security to interop with basic authentication. ... Username Tokens are not authenticated ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
Loading