4 Replies Latest reply on Aug 27, 2007 11:58 AM by DominicV

    WebServices and Windows Authentication

      Hi All,

      I need to access a webservice that uses Windows Kerberos authentication and having looked through the language reference documentation at http://livedocs.adobe.com/flex/201/langref/mx/rpc/soap/WebService.html I am non-the-wiser as to whether Flex 2 supports this authentication method.

      Does anyone know whether Flex 2 can be used to access a web service that requires Kerberos windows authentication; and if its not pushing my luck also provide an example on how to send the username, password and domain?
      UPDATED: From observations it appears that the flash player is automatically handling the Windows authentication side of things ... anyone know if this is correct?

      Many thanks.

        • 1. Re: WebServices and Windows Authentication
          I just managed to get Flex to download information from a secure IIS webservice (https) using Flex 2 Hotfix 3. However, I have yet to find a way to authenticate the user from Flex. During my test I had already connected to the service with my browser to view the calls I could make so the Flex app didn't have to authenicate. When I switched to a different browser it didn't work anymore.

          I've tried using setCredentials and it bumped the request back to http (not https) and I've tried using setRemoteCredentials and that just gave me the authentication error again.

          If you find out any more information on this I'd love to hear about it.
          • 2. Re: WebServices and Windows Authentication
            DominicV Level 1
            I believe setRemoteCredential etc are for use with Flex Data Services only (although I may be wrong). If your webservices are .Net based then take a look here http://msdn2.microsoft.com/en-us/library/9z52by6a.aspx; this simply uses a custom soap header and you would pass from the Flex client the username and password via the header. Is this what you wanted?
            • 3. Re: WebServices and Windows Authentication
              huych02 Level 1
              So how would I configure the SOAP headers from the Flex side? Do I have to implement all that code on the server side? ...and will this work with SSL?
              • 4. Re: WebServices and Windows Authentication
                DominicV Level 1
                This link explains how to add soap headers in Flex: http://livedocs.adobe.com/flex/201/html/wwhelp/wwhimpl/common/html/wwhelp.htm?context=Live Docs_Book_Parts&file=dataservices_099_32.html

                First you should get the right .Net example for the version of .Net you have (the links for the versions are in the top right of the .Net page I previously sent). Then if I was you I'd create a simple .Net web service project and implement the example they provide exactly as they show you. Finally, implement a simple Flex application to pass the details via a custom header in a similar manner to that shown in the Flex example link. Once you have figured out the details and got it working it will be a snap to reuse for your main project. I'm afraid I don't have a complete end to end example to send you (maybe someone else will be able to send something?) - however using the two links together it should be relatively easy to figure it all out.

                Oh and yes this will work over SSL :-) and should really only be done over SSL as the username and password will otherwise be sent across http in plain text (unless you create your own encryption solution for the header- and even then it will be far less secure than Https / SSL).