# Web service with NTLM auth

**URL:** <https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158>\
**Category:** General\
**Created:** [21 October 2018 07:40 UTC](https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158 "2018-10-21T07:40:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![diego.gazzo](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@diego.gazzo](https://discourse.nodered.org/u/diego.gazzo)\
**Post date:** [21 October 2018 07:40 UTC](https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158/1 "2018-10-21T07:40:02Z")

</div>

Good morning,  
i need to consume a SOAP web service with NTLM authentication. Is there a way for doing this easily in node-red? in the soap request module i cannot see this type of authentication...  
do i have to write my own function?  
thanks, kind regards  
Diego

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [21 October 2018 12:37 UTC](https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158/2 "2018-10-21T12:37:41Z")

</div>

NTLM authentication is generally not recommended for web apps and API's except for pure Microsoft stacks and on secure local networks (not the Internet) due to lack of support and systemic weaknesses in the authentication and authorisation methods.

I know of know way to do it personally unless you are using an all Microsoft stack (there may be ways, I don't really have the experience).

One possible way would be to use a local authenticating proxy. I've used that in the past when a corporate infrastructure used an NTLM authenticated corporate proxy. The local proxy can be configured to pass the NTLM authentication. Been a long time though since I had to do that since such authentication is rarely used these days. Indeed, so long ago that the notes for it have fallen off the back of my OneNote notebooks.

---

<div class="post-metadata">

**Author:** ![diego.gazzo](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@diego.gazzo](https://discourse.nodered.org/u/diego.gazzo)\
**Post date:** [22 October 2018 08:45 UTC](https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158/3 "2018-10-22T08:45:56Z")

</div>

Thank you for your feedback, first.  
Indeed this is an internal service, not exposed to internet,  
May i ask you which software you used in the past for set-up the authenticating proxy?  
Kind regards,  
Diego

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [22 October 2018 15:29 UTC](https://discourse.nodered.org/t/web-service-with-ntlm-auth/4158/4 "2018-10-22T15:29:50Z")

</div>

> [@diego.gazzo](#):
>
> May i ask you which software you used in the past for set-up the authenticating proxy?

I knew you'd ask that! That's why I added the comment about my notes - it appears that the info is in a notebook that I'm no longer actively using.

Let me see if I can find something ... Ah, got it, I've used this previously - [cntlm](http://cntlm.sourceforge.net/). But [this google search](https://www.google.co.uk/search?q=windows+ntlm+proxy+authentication) may throw up some possible alternatives.