Thycotic Community - Secret Server - Enabling Webservices - Messages

Message from Jeremy A

Thu, 04 Mar 2010 10:24:30 GMT

thanks.

this is exactly the type of information I was looking for.

Message from Jonathan

Thu, 04 Mar 2010 10:11:52 GMT

Jeremy,

Enabling webservices simply makes the asp.net webservices built into Secret Server available. They are found under /webservices/sswebservice.asmx in your Secret Server. They run on the same port as the web application. You can view them with a browser to see the functionality that is offered.

The webservices are secure and require authentication in the same manner as regular access to Secret Server. All actions that involve data are also logged (Secret views, updates, adds, etc).

The first step is to authenticate with the webservice to obtain an authentication token. This involves calling the Authenticate method (coming in 7.0 there will also be AuthenticateRADIUS for RADIUS-based logins). The Authenticate method takes the same parameters that you use to login to Secret Server. If login is successful, then an authentication token is issued. This token can then be used to call the other webservice methods.

Enabling webservices allows Secret Server to be accessed using Secret Assistant (it uses webservices) and the iPhone app.

If you have further questions, I would be happy to discuss by phone or email (just submit a support ticket and ask for me).

We are currently working on an updated User Guide for 7.0 that will fully document the webservices.

Best.

Message from Jeremy A

Thu, 04 Mar 2010 09:52:47 GMT

Sorry, no. That doesn't help. I know how to enable the webservices.

My principle concern is the security of the passwords. I want to know specifically what happens when I enable this. Does this open the server up to other wireless devices? How does this allow WAN access? What firewall ports data goes through for this (if not 80)etc... technical information regarding how this change affects the security of the server.

Message from hao

Thu, 04 Mar 2010 09:03:58 GMT

Hello Jeremy,

Secret Server Web Service can be turn on at Administration -> Configuration page. Hit Edit button when you arrive at the page and you will find it near the top.

See this screenshot for reference: http://i.imgur.com/i2MTA.png

Let us know if that doesn't help,
Hao Deng

Message from Jeremy A

Thu, 04 Mar 2010 06:35:16 GMT

Looking to enable Webservices in SecretServer so that some of our admins can use the iphone app, but I can't find any info on webservices in help files or online KB.

Can you provide a detailed tech overview of what enabling this does?