topic Re: SAPGUI Security in Application Development and Automation Discussions

SAPGUI Security

Former Member — Mon, 16 Mar 2009 16:20:13 GMT

Hi,

I'm using the following scenario :

Customers network (SAPGUI) ---> Internet --> SAP Router (in my DMZ) --> SAP ABAP AS (my network)

If I don't use any security software at both workstation side and SAP server side, Is the connection from SAPGUI to my SAProuter secure enough? If not, what's the best solution?

P.S. my main concern is user name & password not to be hacked during transmission between SAPGUI client and SAP server.

Rgds,

Sheikh Saggaf

Re: SAPGUI Security

tim_alsop — Mon, 16 Mar 2009 16:42:24 GMT

Sheikh,

In this case, the users password will be transmitted over Internet in "compressed" format. This is not very secure, so I suggest you consider using a VPN (if you are not already) and also consider using SNC authentication to logon to SAP ABAP, in which case a cryptogtraphic token will be transmitted over the Internet (or over a VPN tunnel) instead of any userid and password information.

Thanks,

Tim

Re: SAPGUI Security

Former Member — Mon, 16 Mar 2009 18:05:46 GMT

Thanks Time for your reply.

If I don't want to give VPN access, and want to use SNC, Is it supported by SAP at client side with SAPGUI for win? or Should I be licensed through a third party product?

Appreciate any docs for using SNC with SAPGUI ... Thx

Rgds,

Sheikh

Re: SAPGUI Security

tim_alsop — Mon, 16 Mar 2009 18:09:05 GMT

Sheikh,

When you use SNC authentication, you need to use an SNC library on both workstation and on ABAP AS server side. The SNC library you use must be using same security mechanism/protocol.

Also, if your SAP system is on UNIX or Linux, then you cannot use the SNC library provided by SAP. In this case you need to use an SNC library from a SAP partner company, and they will provide you with a supported SNC library for use on both Windows workstations and on UNIX or Linux servers.

Thanks,

Tim

Re: SAPGUI Security

Bernhard_SAP — Tue, 17 Mar 2009 07:21:02 GMT

Hello Sheik,

there are some documents available at service.sap.com/security->Security in Detail->Secure User Access ->Authentication & Single Sign-On (for instance the SNC User's Guide )

b.rgds,

Bernhard

Re: SAPGUI Security

Former Member — Wed, 18 Mar 2009 20:00:33 GMT

Hi Tim,

Could you suggest any good product which support SNC at both server and client side Pls?

Thx

Sheikh

Re: SAPGUI Security

tim_alsop — Wed, 18 Mar 2009 20:06:20 GMT

Sheikh,

Yes, in fact, I work for a SAP partner company who sells such a product.

Thanks,

Tim