SALT GWWS servers rely on Oracle Tuxedo authentication framework to check the validity of the Web Service clients. If your existing Oracle Tuxedo application is already applied, Web Service clients must send user credentials using one of the following:

• HTTP Basic Authentication in the HTTP message header
• Web Service Security Username Token in the SOAP message header

Contrarily, if you want to authenticate Web Service clients for SALT, you must configure Oracle Tuxedo authentication in the Oracle Tuxedo domain.

For more information, see administering_authentication in the Oracle Tuxedo 22c Documentation