web.config settings that secure the Web services

Settings in the web.config file control various aspects of the use of the Clinical Data API. These settings are determined by the behavior you want to control and whether the Clinical Data API uses WCF or WSE as its web service.

By default, these settings are off (disabled). When developing your client, you might want to enable certain settings for testing purposes. However, before deploying your client to production, be sure to disable the settings to ensure web services are secure.

Settings in the web.config file affect the following access to metadata. The Clinical Data API metadata output can be used as input to client programs that you build. Settings in the web.config file control whether metadata is output by an interface, and whether client programs have access to this metadata.

For more information, see Restrict access to service metadata.