Hello everyone
We have an On-Premise installation of Business Central 2022, and we want to access OData web services so that our external applications can synchronize data.
In Postman, we've been able to use two identification methods together, by setting the ClientServicesCredentialType parameter:
- Windows: using NTLM authentication, an Active Directory username and its Windows password.
- NavUserPassword: using Basic Auth authentication, a BC username and its Web Service Access Key (configured in the BC user configuration page).
But there's an issue with this last method, however, as it makes access to BC's web interface unavailable.
So as it stands, we can use Windows authentication to access OData services. But this isn't our preferred method of accessing a web service, as we're exposing in cleartext in a configuration file the login details of a user in our organization's Active Directory (even if the user is a service account, this is still a vulnerability).
That's why we'd like to know if it's possible to use two different methods for the two accesses to BC:
- Web interface: Windows/NTLM connection method
- Web service client: NavUserPassword connection method