How Do I Set Up Authorization for a Deployed Service? (Magic xpa 3.x)
For any service you are deploying, you have the capability to allow only specific users access to the service. This is done in three steps:
-
First, you must define the users.
-
Second, you must define which users have access to the Web service.
-
Third, you must define which authentication method will be required to access the service.
These steps are explained below.
-
Open the Systinet console.
-
Select Security->Database of Identities on the tree to the left.
-
You will see a list of existing users on the right. Click the Add User button below the table.
-
You will get a box prompting you for a user name. Enter the name, and click Add User.
-
Now you will see the new user on the user table. You can use the buttons to the right of each user id to manage this user.
-
To set the password, first click the 
button.
-
A list of properties for this user will appear. Click the Add property button.
-
You will see a list of properties. One of them is password. Click on the 
to the right of the password property.
-
You will be prompted to enter the new password, and to confirm it. Then click the Enter property button.
Now, you need to change the service to be authenticated and define the user as allowed to consume it.
-
Select Web Services from the tree on the left.
-
Select the service you want to work with.
-
Select Set endpoint method ACL on the right, in the Security section.
-
Each operation will be shown in a separate line on the table. Click Set ACL to set authentication for each operation.
When you click Set ACL, another window will appear, with a list of users and what rights they have. Clicking grant will give them access; clicking revoke will revoke access.
Last, you need to define this service as Authorized.
-
Select Web Services from the tree on the left.
-
Select the service you want to work with.
-
From the Security section, click on Set endpoint security.
-
You will then be on the Authentication and Authorization page. Select the Authorization required check box. Check whatever security providers you want to accept. Then click Save Changes.
That is all that is needed on the provider’s side. If you are accessing this Web service, you will need to provide the authentication that was specified here. How to do this is explained in How Do I Securely Access a Web Service?.
