Web service authentication best practice

J

JASCIBER

I have a number of Infopath templates that need to access data from a Oracle
Database through web services. The Oracle authentication is controled by
Active directory.

There are several ways to authenticate the users, are any considered best
practice? And where can I find ressources describing the best practice?
Please take in mind that security is a big issue.

1) Infopath <-> IIS (Active Directory auth.) <-> WS <-> Oracle DB

2) Infopath <-> IIS <-> WS (Active Directory auth.) <-> Oracle DB

3) Infopath <-> IIS <-> Sharepoint AD auth. <-> WS <-> Oracle DB


Thanx

JASCIBER
 
Top