Implementing TSO for custom RESTful clients

The Service Manager RESTful framework supports the Trusted Sign-On (TSO) authentication method.

Do the following to use TSO authentication for custom RESTful clients:

  • Enable two-way SSL between the web service client and the Service Manager server, so that they trust each other.
  • Create a dedicated integration account for the web service client to log in to the Service Manager server.
  • Add a “Pragma: TrustedSignOn” header in the http request, which will make the Service Manager server aware that this is a TSO request and hence skip password checking. The Service Manager server checks only the integration user to see whether it exists in the Service Manager database.

Note When the custom HTTP header “Pragma: TrustedSignOn” is present, the SM Server skips password checking because the presence of the header indicates the client has been authenticated by an external source such as Active Directory, Kerberos, or a custom Single Sign-On third-party server. This document assumes that you have taken the necessary steps to ensure that your custom RESTful client has been successfully pre-authenticated before any transactions with the Service Manager RESTful API begin.