Testing web service with SoapUI and Windows authentication

web-services testing soap user-interface soapui

Henrik P. Hessel · May 27, 2009 · Viewed 68.1k times · Source

Is it possible to include the Windows domain credentials to test my web service with SOAP UI?

I found a properties page but the IIS just responses with "wrong credentials".

Answer

SoapUI doesn't seem to work directly with NTLM authentication, but you can use a proxy such as Burp Suite to do the auth for you.

Download Burp Suite from http://portswigger.net/burp/ and crank it up.
On Burp's "Proxy : Intercept" tab, click the button to turn intercept off.
On Burp's "Proxy : Options" tab, make sure it's set to an unused port, the default is 8081
On Burp's "Options" tab, tick "do www authentication" and add a setting for the server you wish to hit. Also tick "prompt for credentials on authentication failure"
Switch to Burp's "Proxy : History" tab so you can see requests going through.
In SoapUI, choose File > Preferences, then select "Proxy Settings". Enter Host "localhost" and port "8081".
Use SoapUI as normal. It will send requests through Burp Proxy, which will do the NTLM authentication for you.