Using SOAP with Aras

Question

Hi there, 
 
 In Aras V11 I have played around with sending AML from VB for Applications to our Aras server. I am trying to do it without using the IOM.dll. 
 I did manage to get it working, but now with our V12.0 installation the server is giving me the cold shoulder saying: "You do not have permission to view this directory or page." 
 I am sending the SOAP to: "http://xxxxxxxxx/InnovatorServer/Server/InnovatorServer.aspx" 
 The password is MD5 encoded. 
 
 What could the reason be for this message? 
 
 Kind regards 
 Riaan

Christopher Gillis · Accepted Answer

Hi Riaan, 
 There were some significant security updates with the move towards v12.0. For instance, it is no longer possible by default to authenticate with only a hashed password using the Aras REST API, and I'm betting there's been similar changes for SOAP requests as well. 
 At least for the REST calls in 12.0, you must now request an OAuth token and use that to authenticate your requests to the server. You can check out steps on how to do that in this blog though you may need to do adapt the steps to use SOAP instead. 
 Chris 
 
 Christopher Gillis 
 Aras Labs Software Engineer