Skip to content

SOAP service documentation

ADUserServices is a single-class ASMX web service that provisions, unlocks, deletes, and modifies Active Directory user accounts in the external domain, manages group membership, and answers read-only queries about user attributes and group membership in both the internal and external domains. Consumers are not identifiable from this repository; the service publishes 19 operations behind an IP allow-list that gates 8 mutating operations.

Field Value
Host project ADUserServices
Framework ASMX (System.Web.Services, .NET Framework v4.6.2)
Language VB.NET
Host IIS — No Global.asax
Activation .asmx marker file + codebehind
Service classes 1
SOAP namespace http://tempuri.org/
WSI conformance <WebServiceBinding(ConformsTo:=WsiProfiles.BasicProfile1_1)>
Base class System.Web.Services.WebService
ScriptService Commented out (not active)
Metadata publication ?wsdl published by ASP.NET
Deployment variants Internal and External

Flagged finding — SOAP namespace. http://tempuri.org/ is the untouched Visual Studio/framework scaffolding default (clsADUserServices.asmx.vb line 38). It qualifies every request and response element and every SOAP action on the wire; it was never changed. See Tech debt (TD-01, HIGH).

Documentation sections

Section Description
Overview Purpose, consumers, business context, and capability summary
Architecture Layering, request path, shared state, and integration points
Activation and hosting .asmx inventory, codebehind mapping, and deployment variants
Operations Operation catalog with per-service detail pages
Faults and error pipeline SoapException behavior and what a caller receives
Authentication and authorization Identity, authorization enforcement, and role requirements
Dependencies Libraries, packages, services, and database connections
Configuration Configuration reads and the Web.config surface
Operations and processes End-to-end processing workflows behind the operations
Business rules Rules enforced during message processing
Operational runbook Deployment, health checks, logs, faults, error recovery
Tech debt CRITICAL and HIGH severity findings

Service classes

Service class .asmx file SOAP namespace Operations Also hosted in Documentation
ADUserServices.clsADUserServices clsADUserServices.asmx http://tempuri.org/ 19 — Docs

WebMethod catalog

# Operation Purpose Access check Documentation
OP-01 HelloWorld Constant greeting; scaffolding on the published contract None Docs / Operation
OP-02 AddUser Creates an external-domain AD account IP allow-list Docs / Operation
OP-03 UnlockAccount Unlocks an external-domain account IP allow-list Docs / Operation
OP-04 AddUserToGroup Grants group membership IP allow-list Docs / Operation
OP-05 DeleteUser Deletes an external-domain account IP allow-list Docs / Operation
OP-06 DeleteUserFromGroup Revokes group membership IP allow-list Docs / Operation
OP-07 DoesUserExist Existence check, either domain None Docs / Operation
OP-08 DoesUserHaveResource Transitive resource-membership check None Docs / Operation
OP-09 ChangeUserAccount Modifies account attributes IP allow-list Docs / Operation
OP-10 ChangeUserPassword Resets password (sentinel on failure) IP allow-list Docs / Operation
OP-11 ChangeUserPasswordOrGetException Resets password (faults on failure) IP allow-list Docs / Operation
OP-12 GetUserEmail Reads mail None Docs / Operation
OP-13 GetUserGroups Reads transitive group list (untyped ArrayList) None Docs / Operation
OP-14 GetUserResources Reads filtered *Resource* groups (untyped ArrayList) None Docs / Operation
OP-15 GetUserFAX Reads facsimileTelephoneNumber None Docs / Operation
OP-16 GetUserLastLogon Reads/derives lastLogonTimestamp None Docs / Operation
OP-17 GetUserPrinter Reads extensionAttribute2, internal domain only None Docs / Operation
OP-18 IsUserInGroup Direct (non-transitive) membership check None Docs / Operation
OP-19 CheckAccess The IP allow-list decision itself, published and unauthenticated None — is itself the access-control primitive Docs / Operation

Sources

  • src\ADUserServices\clsADUserServices.asmx
  • src\ADUserServices\clsADUserServices.asmx.vb
  • .saifdocgen\state\runs\20260922-101326-aduserservices\analysis\aduserservices-analysis.md