To secure the communication channel, does EPIC interconnect web service (especially personal management API) supports WS-Security?
To make channel secure between caller and Interconnect web service, the only solution is HTTPS and PKI (public key infrastructure) authentication. Is this a correct statement?
Asked
Active
Viewed 3,812 times
0
Julien Marrec
- 11,605
- 4
- 46
- 63
Rahul Borate
- 1
- 1
- 2
-
Have you tried looking at the documentation? Could you provide links to show some of your research? – Quintin Balsdon Nov 15 '16 at 11:41
-
Links https://open.epic.com/Interface/WebServices and https://open.epic.com/Operational/PersonnelManagement gives no or very little information on how to secure the channel between caller and EPIC interconnect service. – Rahul Borate Nov 15 '16 at 12:08
-
The PersonnelManagement SOAP API provided by Epic systems does not include an Authorization layer ("auth-z" in security slang) in the protocol. This means there is no username and password exchanged between SOAP clients (Caller) and the SOAP server (Epic). – Rahul Borate Nov 15 '16 at 12:13