AEM Authentication of SOAP/REST Web Services

[AEM_Forum]

Hi,

How AEM Authenticates the SOAP/REST Web Services requests?

Obviously, the request needs to be authenticated and authorized for all Web Services invocations.

Is the authentication done as in the normal AEM access case?

Are the users/passwords stored in AEM or in an LDAP?

How is authorization done? Using AEM ACLs?

Appreciate your responses.

Thanks,

Rama.

[Feike_Visser1]

All requests in AEM are handled in the same way, so using authentication, acl etc.

[smacdonald2008]

When you say SOAP web service - do you mean when an AEM service consumes a web service?  AEM does not expose a web service - only can consume a 3rd party SOAP WS.

[AEM_Forum]

Hi,

I am talking about AEM consuming external web services and the account external web services should use.

Authentication: Users could be stored in AEM repository or LDAP.

Authorization: The same users should have ACLs

Kindly confirm this understanding.

Thanks,

Rama.

[kautuk_sahni · Accepted solution]

Rama Krishna Nyshadham wrote...

Hi,

I am talking about AEM consuming external web services and the account external web services should use.

Authentication: Users could be stored in AEM repository or LDAP.

Authorization: The same users should have ACLs

Kindly confirm this understanding.

Thanks,

Rama.

Hi Rama

I would like you to please have look at this community article:- 

Link:- http://jackrabbit.apache.org/oak/docs/security/authentication/externalloginmodule.html

// It talks about Authentication with the External Login Module.

You question is more related to how AEM handles/Works with external authentication module. How it saves users and ACLs?

~kautuk