Hi,
I was hoping that someone might be able to give me some advice on a new web service I'm setting up.
The web service will be used as an API to add new records onto an existing system. I'd then do some other calls, such as updating the original source with updates and then doing a final call out to say "Job Complete".
My question is about the security for doing this. Every "User" that uses the site will in fact be a website - I will have to authorise and assign an account to each website which will be connecting to the WS and so it won't be available to the public.
My initial thought was to just use Windows Authentication, turn off anonymous access and then setup a windows user account for each "website". The websites would then have to attach their network credentials to the Web Service instance within their code. Then they can make their calls freely.
I've done a test and this works ...
Go to the complete details ...