Web Services Security Considerations

Universal Access is designed to communicate with an arbitrary number of remote systems. These may be configured through the remote systems configuration page in the Administrator and Universal Access Entry Edition Administrator applications.

Remote systems can invoke web services on Universal Access and must supply username/password credentials as part of the SOAP header, details of how to do this are described using sample web service requests in Appendix A. It is strongly recommended that a different username and password be assigned to each remote system. The username associated with a remote system is set in the Source User Name field of the remote system configuration page. Having a different user name for each remote system allows Universal Access to perform proper data-based security checks on the incoming service requests. This prevents one remote system sending requests to update data that is properly the concern of a different remote system.