|
|
|
|
web.config settings that secure the Web services
Settings in the web.config file control various aspects of the use of InForm User Management Interface interfaces. These settings are determined by the behavior you want to control.
By default, these settings are off (disabled). When developing your client, you might want to enable certain settings for testing purposes. However, before deploying your client to production, be sure to disable the settings to ensure Web services are secure.
Settings in the web.config file affect the following:
- Access to metadata.
Metadata that is output by InForm User Management Interface interfaces can be used as input to client programs that you build. Settings in the web.config file control whether metadata is output by an interface, and whether client programs have access to this metadata.
For more information, see Restrict access to service metadata.
- The amount of detail provided in exceptions.
For more information, see WCF—Turn off includeExceptionsDetailsInFaults attribute and Turn off customErrors.
