Integrate Authentication via the SOAP API

To integrate OneSpan Authentication Server authentication functionality with a custom application via SOAP API, you need to be familiar with the following standards:

• XML
• XML Schema
• SOAP

The SOAP authentication API exposes the following SOAP operations that can be used to perform the authentication commands specified above:

• authUser
• cancelAuthUser
• getChallenge
• getSecureChallenge
• getPreparedSecureChallenge
• updatePassword
• changeEncStatPwd
• changeBackendPassword

To execute a supported SOAP authentication command

1. Create a SOAP request.
2. Specify the correct SOAP authentication operation in the SOAP request.
3. Specify one or more authentication attributes as parameters for the SOAP operation. Attributes are key-value pairs.

4. Import the OneSpan Authentication Server SSL server certificate as trusted root certificate on the machine where your client application is running.

   This will allow your SOAP client application to connect to OneSpan Authentication Server securely via SSL.

5. Send the SOAP request to OneSpan Authentication Server. By default, the SOAP request should be transmitted over HTTPS with the OneSpan Authentication Server.

   By default, OneSpan Authentication Server is configured to accept SOAP requests on port 8888.

6. Receive the SOAP response.
7. Process the SOAP response.

For more information about the structure of SOAP messages, see SOAP message structure (SDK SOAP API).