Currently in pivot table, to access OLAP cube we need to provide its URL and authentication details (if required) in client side. It can be publicly shown in browser. To avoid it, these information shouldn't be given in client side report. Alternatively, need to introduce an API service to provide these information. And need to introduce an event to pass the generated SOAP message to the API service to fetch the XML output from OLAP cube.