Engineering
Long running processes and service authentication – SAML tokens to the rescue?
When executing long running business processes which include service invocations you often have to solve a problem: What credentials should you use when calling the service? Let’s have a look at a simple example: A user might start the process manually. Then service 1 might be executed with the credentials of this user. But how about service 2? Should it be executed with credentials from the first user or the user who finished the user task? How about service 3? From our experience, there is no rule of thumb but it needs to be decided based on the project requirements. All of the three options are valid: The starting user credentials will be used for all service calls in…
