Web Service Sender security

[yajjala1]

Hello All,

We are integrating our POS (CLASS) application to PSCD... We are using standard SAP XI scenario..

Webservice to PI to ERP (proxy).

In POS client is using VB code to connect PI via web-service..

Sender webservice set basic authentication (User-ID/password)..

This user ID and password were stored in CLASS database, unfortunately password is NOT encrypted in CLASS data base..

Our internal audit was not happy password being not encrypted in CLASS database..

MY question is:

Is there any other way can we invoke this sender webservice with out user ID and password being stored in CLASS database.

I am using cash-point external cash-desk..

THanks

John

Edited by: JOHN YAJJALA on May 11, 2011 7:50 PM

Edited by: JOHN YAJJALA on May 11, 2011 3:16 PM

[baskar_gopalakrishnan2]

>Is there any other way can we invoke this sender webservice with out user ID and password being stored in CLASS database.

one way is using certificate authentication. This way you dont need passing user and password. Search SDN for the client certificate authentication. Basicallly the external system share their trust certificate with PI. Talk to Basis team about this.