So finally I got the opportunity to write some about a finding that has solved a major problem at my customer. A big thank you to Fredrik A and Mikael for the help on this solution.
The problem is a probably a common one; we have some external web applications (that is: reachable from the Internet) that uses some functionality from internal web service. These internal web service in turn calls a database. The problem probably arise in many SOA solutions since credentials will flow from server to server.
Since the users of the external applications may be anonymous or logged into a portal we can’t send the user credentials all the way to the database.
So we thought that making the calls, to the internal web services, under system account would solve the problem. But then the double hop problem kicked in and the credentials will “disappear” when...