Administration Guide › Configuring Web Services › Authentication and Authorization › Create the Client Program › Authorization SOAP Service

Authorization SOAP Service

The following XML approximates an authorization request to the web service:

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:aut="http://ca.com/2010/04/15/authorization.xsd">
   <soapenv:Header/>
   <soapenv:Body>
      <aut:authorize>         
	<sessionToken>session</sessionToken>
           <appId></appId>         
           <action>GET,POST</action>            
	 <resource>/domainAdmin/a.jsp</resource>         
      </aut:authorize>
   </soapenv:Body>
</soapenv:Envelope>

The following example represents an authorization web service AUTHORIZED response:

<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
   <env:Header/>
   <env:Body>
      <ns2:authorizeResponse xmlns:ns2="http://ca.com/2010/04/15/authorization.xsd">
         <return>
            <message>Authorization Successful</message>
            <resultCode>AUTHORIZED</resultCode>
	<sessionToken>aklaks</sessionToken>
	<authorizationResponses>
	<response/>
	</authorizationResponses>
         </return>
      </ns2:authorizeResponse>
   </env:Body>
</env:Envelope>

The following example represents an authorization web service UN AUTORIZED response:

<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
   <env:Header/>
   <env:Body>
      <ns2:authorizeResponse xmlns:ns2="http://ca.com/2010/04/15/authorization.xsd">
         <return>
            <message> Authorization Failed</message>
            <resultCode>NOTAUTHORIZED</resultCode>
         </return>
      </ns2:authorizeResponse>
   </env:Body>
</env:Envelope>

Note: For an authorization web service request with a valid session token, the NOTAUTHORIZED authorization response has the following constraints:

1. You can configure the response with only the following attributes in the WAMUI:
   • SM_ONREJECTTEXT
   • SMREDIRECTURL or SM_REDIRECTURL
   • SMERROR
2. The response does not contain a session token.