title: How do backend applications authenticate webseal headers?
body: <p>I am new to IBM ISAM and webseal.</p>
  
  <p>How do backend web applications verify that the IV headers (e.g. iv-user) is created by webseal and not some malicious third party?</p>