Security Concerns

By default, all requests sent to the xMatters web service are made over an unencrypted HTTP request. Since web service user credentials are transmitted with every request, anyone can intercept this message and retrieve user credentials. You can address this security concern by fronting the web server with either an Apache or IIS web server using SSL and HTTPS to encrypt the requests and responses (for more information about fronting web servers, see the xMatters installation and administration guide).

Note that the xMatters web services interface does not support authentication using SSO.