Header
Every message header has a sign-on element that authenticates the message, and it may have a sign-off element that ends a particular session.
The header has five possible elements (currently supported):
SignonRq
SignonRs
SignoffRq
SignoffRs
Status
The header for a request has the header element <SignonRq>. The header for the response has the header element <SignonRs>. Similarly, the sign-off elements are specifically for requests and responses. The <Status> element provides status and error information.
Signon Information
The <SignonRq> or <SignonRs> header element provides a location for authentication information, date and time stamps, language preferences, and identification of the application that will use the data. You can find complete information in the ACORD specification.
Authentication Information
The initial <SignonRq> for any session must provide authentication information, typically the user name and password, or a certificate ID. When the server authenticates the user, using the information in the header, the server issues a session key in the <SignonRs>. Subsequent messages use the session key as a token. After a session has finished, any subsequent session must start with the authentication information again.
The following is an example of authentication information included in a <SignonRs> element. The response includes a session key for authentication, in the <SessKey> element, issued by the server after the initial request message was received.
<SignonRs>
<ClientDt>1001-10-02T19:21:06.9-07:00</ClientDt>
<CustLangPref>ENU</CustLangPref>
<ClientApp>
<Org>Oracle/Org>
<Name>Siebel Financial Services</Name>
<Version>8.0</Version>
</ClientApp>
<ServerDt>1001-10-02T19:21:06.9-07:00</ServerDt>
<SessKey>SNOVICEsnoviceadmin</SessKey>
<Language>ENU</Language>
</SignonRs>
Signoff Information
The <SignoffRq> and <SignoffRs> header elements are used to end a session. A typical time to end a session is at the close of business for the day.
The Signoff element, <SignoffRq> or <SignoffRs>, appears at the end of the message, just before the end of the envelope </ACORD>. The Signoff element may optionally contain a <cust ID> element.