Please note: These WebEx forums have replaced the earlier site forums. All the previous threads and posts have been replicated here, and if you subscribed to the previous forums, please re-subscribe. Thank you.

Authentication in XML API

Authentication in XML API	Dipak Jadhav	12/21/12 5:55 AM
RE: Authentication in XML API	Nathan Morrow	12/21/12 6:49 PM
RE: Authentication in XML API	Dipak Jadhav	12/24/12 5:18 AM
RE: Authentication in XML API	Nathan Morrow	1/2/13 4:29 PM

Dipak Jadhav Posts: 16 Join Date: 9/21/12 Recent Posts	Authentication in XML API authentication Answer 12/21/12 5:55 AM Mark as an Answer Submit Reply with Quote Quick Reply Hi, As per the reference guide , we need to submit WebEx userId, password, siteId and partnerId in security context. We are storing this information in DB. Is there any othe way like passing login token or SSO which we can use. I don't want to pass WebEx userId, password, siteId and partnerId in request to avoid security issue.
	Sign in to vote. Flag Please sign in to flag this as inappropriate. Top

Nathan Morrow Posts: 65 Join Date: 3/29/11 Recent Posts	RE: Authentication in XML API Answer 12/21/12 6:49 PM as a reply to Dipak Jadhav. Mark as an Answer Submit Reply with Quote Quick Reply XML API supports SAML SSO using AuthenticateUser with a SAML assertion in the body. This command will return a sessionTicket that is used instead of password for subsequent XML requests. You will still need the WebExID, site ID, and partner ID.
	Sign in to vote. Flag Please sign in to flag this as inappropriate. Top

Dipak Jadhav

Posts: 16

Join Date: 9/21/12

Recent Posts

RE: Authentication in XML API

Answer

12/24/12 5:18 AM as a reply to Nathan Morrow.

Nathan Morrow:

XML API supports SAML SSO using AuthenticateUser with a SAML assertion in the body. This command will return a sessionTicket that is used instead of password for subsequent XML requests. You will still need the WebExID, site ID, and partner ID.

Hi Nathan, Thanks for the reply. What should I have to give in ? I have attached my request and response. I am getting the errro Please let me know if I have done any mistake. Do I need to invoke this API every time in my application or only once and then store the sessionTicket and use it for other API? Thanks, Dipak

Attachments:

Flag

Nathan Morrow Posts: 65 Join Date: 3/29/11 Recent Posts	RE: Authentication in XML API Answer 1/2/13 4:29 PM as a reply to Dipak Jadhav. Mark as an Answer Submit Reply with Quote Quick Reply Your SAML Response should be filled with a complete SAML assertion, the same that would be used to authenticate you on the WebEx page, preferably in BASE64 format. The resulting session ticket is good for multiple API requests, although it does expire after a period of time. Best practice would be to call AuthenticateUser at the beginning of each new session (any time user loads the page for the first time in a browser instance and has not recently used the page).
	Sign in to vote. Flag Please sign in to flag this as inappropriate. Top