Web Service Security

[AdrianH]

Does anyone have any material on enabling web service security above and beyond the OOTB Bearer token stuff?

Thanks!

Any help much appreciated.

Yours,

Adrian

[Bhavin]

Adrian,
Assuming that you are talking about triggered or ultra tasks where you can run SnapLogic pipeline via REST call’s, at present you have two options

1 - bearer token
2 - http basic auth, where you set http authrization → Basic Auth → your snaplogic login creds i.e. username and pwd

You can also create a service account which can only run triggered tasks, http://doc.snaplogic.com/users

Service accounts need to be given permissions on a project or group basis just like regular user accounts. These accounts, however, cannot log into Designer or Manager and can only be used to run triggered tasks using basic authentication.

For additional security options you can try accessing SnapLogic tasks via 3rd party API gateway solution.

[AdrianH]

Hi,

Yes I was referring to triggered tasks.

Thanks, where or how is basic authentication set up for a triggered task?

Yours,

Adrian

[walkerline117]

Hi, is this still the case, the service account can only run triggered task?
Is ultra supported for service account?

Thanks

[dwhite]

No.

Any user with a standard account (has username and password) that has been granted at least Read + Execute Access to the project where the trigger task resides can run that trigger task using basic authentication. This can be a standard user or a service account. Service Accounts are setup like a normal user, and permissions are managed like a normal user, but it is unable to log in to the UI.

Ultra only works with bearer auth.