---
sourceDocument: Xanadu API Reference
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/api-reference

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Enable WS-Security verification

# Enable WS-Security verification {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Administrators can enable Web Services Security (WSS) verification from the Web
Services system properties.

## Before you begin

Role required: web_service_admin or admin

## Procedure

1. Navigate to AllSystem Web ServicesProperties.
2. For Require WS-Security header verification for all incoming SOAP requests, select Yes.  
   Note:  
   Selecting this option enables WS-Security for all inbound SOAP requests. It is not possible to enable WS-Security for only some requests.
3. Click Save.
4. Create a [WS-security profile](https://servicenow-prod.fluidtopics.net/85Y3~dBztWlbzl5ag3Qo2g "Create a new WS Security profile to define how to authenticate a web services message when WS-Security is enabled.").
5. Update the user record for the [Mid Server](https://www.servicenow.com/docs/access?context=t_SetupMIDServerRole&version=xanadu&pubname=xanadu-servicenow-platform&ft:locale=en-US) and [ODBC
   driver](https://servicenow-prod.fluidtopics.net/Ht5Uo9ydDAxpJ84_fKUgvg "The ServiceNow open database connectivity (ODBC) driver provides read-only access to the database associated with your ServiceNow instance.") to [mark these users as internal integration users](https://servicenow-prod.fluidtopics.net/AT3IAwVE8KZx4aobQHOZkA "Allow internal integration communications to bypass the WSS authentication requirement by marking their user accounts as internal integration users.").
6. Download and install the latest [MID Server](https://www.servicenow.com/docs/access?context=mid-server-installation&version=xanadu&pubname=xanadu-servicenow-platform&ft:locale=en-US) and [ODBC
   driver](https://servicenow-prod.fluidtopics.net/Ht5Uo9ydDAxpJ84_fKUgvg "The ServiceNow open database connectivity (ODBC) driver provides read-only access to the database associated with your ServiceNow instance.").
7. To validate SOAP request signatures, upload the remote web service's certificate as a JKS and create the web service's WSS Username Token Profile.  
   Note:  
   Because ServiceNow WSS implementation does not verify the CA certificate, you do not need to upload the web service's CA certificate.
* **[Mark service accounts as internal integration users](https://servicenow-prod.fluidtopics.net/AT3IAwVE8KZx4aobQHOZkA)**   
  Allow internal integration communications to bypass the WSS authentication requirement by marking their user accounts as internal integration users.

**Related topics**   

* [Basic authentication](https://servicenow-prod.fluidtopics.net/sTBQth13zJB9qSZPTI08ng#c_SOAPWebService__SOAP-basic-auth)

*[\>]: and then