web services - Webservice security - What is the best option? -
I would like to protect our webserives though I'm not completely sure how this is done. There is no need to say that I am very new to this. What I would like to do here is that I would like to authenticate the user that if the user has authenticated the database / ActiveDirectory or third party authentication, then I would like to use a token or principal (machine specific) and send it to the webservice Is this possible? If yes, then what principle will be sent in clear text? In fact, I'm asking for guidance on how to implement security in webservices
If you want WCF , Using the default wsHttpBinding
, which uses WS-Security, then you can choose how to authenticate users. I believe the default will be Windows authentication.
Comments
Post a Comment