Skip to main content
Topics#SecurityPregunta de Frank Salinas
Frank Salinas preguntó en #Security
28 mar 2015, 20:37

Additional Security for Inbound Salesforce Webservice

We want to create a Apex Webservice that receives a set of training records for customers from an external system. Our security group want to ensure that only an authorized external system can access the webservice. The external system will use .NET or Java call the webservice.  What is the best security method to ensure to that only external systems that are authorized can send data to the Salesforce webservice? 
3 respuestas
  1. Gautam Kumar (Amazon)
    28 mar 2015, 23:03
    Hi Frank,

    If you want to post some data to salesforce and for that you are creating a web service in apex, you need to give the external system an oauth token, that will ensure that the external system is authorized to send the data.

    Please look into this article for more details

    https://developer.salesforce.com/page/Digging_Deeper_into_OAuth_2.0_on_Force.com

    Or, you can else use session id to authenticate if you aren't handling someone else's password.

    https://www.salesforce.com/us/developer/docs/api_rest/Content/quickstart_oauth.htm

     
Escribir una respuesta...
0/9000