| A.S_3000 2004-11-09, 2:48 am |
| Dear All,
I am wondering if the Biztalk can be used in the following scenario.
I have different web services available and the user can access them through
web browser. However, the access to these web services should be granted
based on the user's credentials (ID, password) which will be provided over
the web. Also, some authorization rules should be applied, which means that
some clients should have access to only a specific web services.
1) Can the Biztalk native support for SSO be used here? In this case how can
we maintain the users database and synchronize it with the SSO users? Take
into consideration that the users' profile is customizable by the user over
the web.
2) Alternatively, can we simulate the authentication/authorization
functionality as an orchestration in Biztalk, which will act at a proxy for
the client? So, the orchestration will grant access to the web services
(forward the message) after checking and validating the
authentication/authorization rules which can be stored in a separate
database. Can that model work? Are there any problems in this design?
Thanks in Advance.
|