Best Practice: Web Services Connector Security Recommendation

[dinesh_mishra]

Description

The Web Services connector is a generic protocol based connector. We are aware that you are providing the endpoint URLs (Base URL) based on the last mile application and it depends on the APIs provided by the governed system. However, it is recommended to use “https” rather than “http”.

For example:

https://api.testurl.com and not http://api.testurl.com.

Although we’re confident you’re familiar with the differences, we want to remind you that HTTP and HTTPS are communication protocols that differ in many ways, the most significant being security. HTTPS is more secure because it is both encrypted and authenticated.

Taking these factors into account, SailPoint recommends using “https” protocol in the Web Services connector.

Action Required

• Use HTTPS in Web Services connector (both VA based and SaaS).

Documentation Reference

• Identity Security Cloud - 
  • Integrating SailPoint with Web Services - VA Based
  • Integrating SailPoint and Web Services SaaS
• IdentityIQ - Integrating SailPoint and Web Services

To ask questions and learn more please visit the Developer Community.