Saving user and password for a Web Service in a form template

[pgagge]

I am designing a form that uses a Web Service as a secondary datasource. The
WS requires me to use a spesific user and password with the proper authority
level.
How should I imbed user and password into the form to avoid having to enter
the information when filling out the form?
It should not be possible for user of the form to extract the sensitive user
information.

In this case, it is not a possible solution to use Windows Authorization and
upgrade the user of any person filling out the form.

 

[Matthew Blain \(Serriform\)]

There are a number of ways to do this by storing the password 'somewhere
else', basically in some form of proxy object or web service. In any
scenario you need to be very careful with the security implications of what
you're doing, in particular how your stored password gets distributed.

--Matthew Blain
http://tips.serriform.com/

"Greg Collins [MVP]" <Greg.Collins_AT_InfoPathDev.com> wrote in message
Being that the form template as well as any filled out form are not secure
(meaning that any user can open them and view their contents), it would be
relatively impossible to store sensitive information in either and expect
that no one will be able to extract it.

The forms are just .xml text files. Anyone can view those with a text
editor.
The templates are just .cab files and can be easily extracted. Any file
within the .xsn CAB file can be viewed with a text editor as well.

Sorry, I'm not sure there's a way to do what you are wanting to do in a
secure way. Someone else may care to interject with an alternative...

--
Greg Collins [InfoPath MVP]
Please visit: http://www.InfoPathDev.com



I am designing a form that uses a Web Service as a secondary datasource. The
WS requires me to use a spesific user and password with the proper authority
level.
How should I imbed user and password into the form to avoid having to enter
the information when filling out the form?
It should not be possible for user of the form to extract the sensitive user
information.

In this case, it is not a possible solution to use Windows Authorization and
upgrade the user of any person filling out the form.