Security between the Siebel system and the adapter
Encryption and authentication
The Siebel adapter can support rsa or mscrypto encryption on the data that it exchanges with the Siebel system. You configure the encryption mode through a query string parameter in the connection URI. For more information about the Siebel connection URI, see Create The Siebel System Connection URI. For more information about rsa and mscrypto encryption support by Siebel, see the Siebel documentation.
Specifying an encryption mode can help to ensure privacy of data exchanged between the adapter and the Siebel system; however, the Siebel adapter does not provide mechanisms that support authorization, authentication or data integrity on such exchanges. If these issues are a concern in your environment, you must provide a security mechanism to help mitigate them.
One possible mechanism for helping to provide more security across the network is Internet Protocol Security (IPsec). IPsec is a framework of open standards for protecting communications over Internet Protocol (IP) networks. For more information about IPsec and about using IPsec with Microsoft products, see the Microsoft TechNet article "IPsec" at https://go.microsoft.com/fwlink/?LinkID=196851.
The Siebel adapter supports authorization and authentication on the connections that it establishes with the Siebel system through user name password credentials that you supply. The Siebel adapter uses these credentials to authenticate the user on the Siebel system when it opens a connection. These credentials provide a level of authorization on the Siebel system for the connection. The Siebel adapter provides a number of methods through which you can supply these credentials. For information about how to more securely provide Siebel credentials in BizTalk solutions, see Security with Siebel adapter and BizTalk Server. For information about how to more securely provide Siebel system credentials in programming solutions, see Secure programming with the Siebel adapter.
Note
The credentials used by the Siebel adapter to establish a connection to the Siebel system do not provide message-level or transport-level authentication or authorization for data traveling across the network. They are only used to open a connection and authenticate the user on the Siebel system.