Given two cloud services, Sender A & Receiver B, communicating over HTTPS, what options do I have to ensure that Receiver B only response to Sender A? For the purposes of


The receiver is generating activation keys for some hardware from a serial number. Our support team is using Salesforce and we're making callouts from Salesforce to an Azure service to generate the key. Since neither are behind a firewall we want to make sure that only request from our Salesforce instance can generate an activation key.

My thought was just to create a nice long key stored on both sides that could be used to validate the request, but I'm not a security expert and don't know if there is anything else I should be considering.


2 Answers 2


You're probably looking for client certificates. It depends on the cloud environment's ability to allow you manage the ssl certificates, but here is another stackexchange article about it: https://security.stackexchange.com/questions/14589/advantages-of-client-certificates-for-client-authentication


I would recommend a SSH tunnel: http://www.ibm.com/developerworks/aix/library/au-tunnelingssh/ https://en.wikipedia.org/wiki/Tunneling_protocol

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.