How to hide login and password transported in interface ?

Question

Hi !
        In the current project that I´m working, the customer is developing a website in .Net and intend to use XI to communication between website and ECC 6.0. One of their needs is to create an interface to call a RFC in ECC 6.0 to validate login+password provided in the website(they created a Z table to persist login data, and a RFC to receive login and password and check in this table).
        My problem is, to solve this situation, I would use a simple sincronous interface but, the login+password information will be logged into monitoring screens of XI, and it´s not desireble, so I´m finding a way to hide this information.
        Initially, I was thinking to make 2 adapter modules, 1 to be used joined to the Sender SOAP Channel that will be used to the website call, that could get the data send by the website and encrypt it, to be sent to the XI pipeline encripted(only the fields login and password), and the 2nd to be used joined to the RFC Receiver channel, to decrypt login and password to be sent to the RFC call. Another alternative that I found was to use the MessageTransformBean and XLST mapping + java, but I´m looking for another alternatives.
        Somebody knows if there are some way to achieve this(hide some information in a message being processed by XI)?
        In time, I can´t to disable the logging of syncronous interfaces, because it´s customer requirement.
        Any help is welcome !
        Thank you in advance, and best regards,
        Wilson

Answer 1

Hi !
        I have solved the problem.
        I used to develop 2 adapter modules, one to intercept the message arriving to SOAP Sender communication channel, encrypt the content of parametrized fields(in the module tab of the comm. channel) and deliver the updated message to the processing chain of the comm. channel.
        This message is so processed correctly by the XI pipeline, and delivered to the RFC Receiver Comm. Channel. I developed another adapter module to receive the data sent to the receiver RFC Comm. Channel, decrypt the contents of parametrized fields(like the another module, parametrized in the module tab), and deliver the updated message to the processing chain of the comm. channel.
        After some  tests, I verified that the message doesn´t remain logged unencrypted into XI(I checked Message Monitoring for Adapter Engine at Runtime Workbench, and the SXI_MONITOR trn).
        Like mentioned by Jaishankar, the SOAP Adapter initially didn´t accepted the module adapter that I wrote following the stardards existing in several documents about adapter modules here in SDN, but after some research, and debbuging sections of the adapter module, I achieved to develop the correct code to work.
        Thank you for your attention, and best regards,
        Wilson