Authentication issue in Outbound Soap message

[suchi]

We are integrating third party system via webseal & for servicenow outbound request webseal is expecting the ssl certificate to authenticate.

1) Kindly confirm if we need to configure mutual authentication or WS security?

2) How to send the certificate for ServiceNow outbound request for both mutual & WS security?

3) We are trying to send SSL certificate in the request header to 3rd party client. For that if we will set up ws-security in servicenow outbound soap message,

Could you please provide the step by step user guide to set up ws-security in servicenow outbound soap message?

Thanks,

Suchitra

[Ankur Bawiskar]

Hi Suchi,

Following links should help you:

http://wiki.servicenow.com/index.php?title=Outbound_SOAP_Web_Service#gsc.tab=0

Web service security

WS-Security

https://docs.servicenow.com/bundle/jakarta-servicenow-platform/page/integrate/outbound-soap/concept/...

Mark Correct if this solves your issue and also hit Like and Helpful if you find my response worthy based on the impact.

Thanks

Ankur

[suchi]

Hi Ankur,

Thanks for your response.

But Still my issue is not resolved.

Thanks,

Suchitra

[Ankur Bawiskar]

Hi Suchi,

Any update on this?

Can you mark my answer as correct, helpful and hit like if you were able to achieve the requirement. This helps in removing this question from unanswered list and helps users to learn from your thread. Thanks in advance.

Regards

Ankur

[suchi]

Hi Ankur,

As I mentioned still facing the issues to connect with third party via Webseal. Let me put my question again:

Regarding outbound WS security setup, Kindly assist me if I am doing anything wrong here.

FYI: We are using Istanbul version.

As I mentioned in my question above we are trying to authenticate via Certificate. So I selected x.509 (not username) from Soap message WS security option . Next it is asking to fill WS-Security X.509 profile, I added the details in ws_security_x509_profile_outbound.list as below:

Name: Any valid Name

keystore : it is referring the keystore certificate(uploaded in servicenow before) provided by Webseal

key store alias: using the name of the keystore(Ex: xyz.jks - in this case the key store alias is xyz)

key store password: Using the credential(password) shared by Webseal team

certificate:   Again referring to the same key store certificate(same - above mentioned key store field)

Let me know if I am doing anything wrong over here, or do i need to set up anything else

& also it will be good if you can assist how to debug the soap request sent to the third party & the certificate details we sent in the request header.

Thanks,

Suchitra