How to handle client authentication for a secure web service in Delphi?

Question

I have a SharePoint server running on my network and I'm trying to create an application in Delphi that allows me to access various SharePoint web services hosted there.

Running my application on the same network as the SharePoint server works fine, however, when I try to run it on a virtual machine that is not part of the same domain, I cannot authenticate. I was looking for some recommendations on how I should handle authentication for this type of scenario, or rather, should I ask the user for their credentials or is there some kind of built-in security model that I can use for this?

Ideally, I would like to try to avoid using usernames and passwords in my application and allow the OS to handle such things, however at the moment I see no other way around this.

Answer 1

After some investigation, in my specific scenario, I decided that using WinINet would be the best approach. I chose this approach over Indy because, after some thorough investigation, I found that Indy had some errors and also did not have all the authentication we needed to build.

WinINet supports credential request and automatic network authentication. See Authentication Processing .