Securing Oracle Health Insurance Web Services

Oracle Health Insurance web services verify the authentication of a user before executing the request. If the user cannot be authenticated, the server will not process the request and return an HTTP 401 – Not Authorized response.

Oracle Health Insurance RESTful APIs use Basic Authentication as the default authentication mechanism. Using OAuth2 tokens is also an option. Failing to pass an “Authorization” HTTP header or using credentials that did not pass authentication will result in the server challenging the client for username and password credentials.