The Web Services Hub uses the following types of security for web services:
User credential.
To get credentials for a request, the client must log in to the PowerCenter repository that contains the web service to run. The login generates a session ID that the web service client must include in the SOAP request.
The Web Services Hub uses this security option for batch web services. A client application that calls a batch web service must log in to the repository before calling any other operation.
User name token.
Web service security that uses a user name token and is based on the OASIS web service security standards, which includes a set of SOAP extensions to ensure content integrity and security for SOAP messages.
User name token is the default security option for protected web services. By default, WSDLs generated by the Web Services Hub for protected web services contain a security header with the UsernameToken element.
For more information about the OASIS web service security standards, read the web services security specifications on the OASIS web site:
If a client application sends a login request to run a web service, send an explicit logout request after the response is received. Login requests without corresponding logout requests can cause a memory leak in the Repository Service and Web Services Hub processes.