topic Re: API disability in user management in Application Development and Automation Discussions

API disability in user management

former_member780069 — Sat, 06 Aug 2016 10:28:39 GMT

Hi Experts,

Can someone please tell me more about API disability in user management. In our landscape, some unauthorized users can access to backend sap system so I was asked to check and disable this functionality. is it anything to do with API disability?

Thanks,

Kavitha

Re: API disability in user management

Murali_Shanmu — Sat, 06 Aug 2016 12:39:25 GMT

Hi Kavitha,

I don't understand your question. I have not heard of API disability. Which solution are you talking about ? Unauthorised users should never be able to access the information from the backend SAP system. Maybe if you can elaborate on your scenario, systems in your landscape and access patterns, we could help provide some suggestions.

Cheers,

Murali

Re: API disability in user management

vicky20691 — Sat, 06 Aug 2016 15:37:09 GMT

Hi kavitha,

Is your question is that you have already added the backend system in the API management system and exposed the API ? And, now anyone having access to the API is able to access the backend service?

If yes then please read about the policies because the security area is one of the really good feature in API management.

You need to apply a PRE-FLOW policy condition on the API, this way the API will be secured before calling the back-end.

Regards,

Vikas

Re: API disability in user management

Sjm — Mon, 08 Aug 2016 05:48:28 GMT

Protect your API from unauthorized users using Auth2.0

https://help.hana.ondemand.com/help/frameset.htm?b7b589334d444293a2a91e0ef4234136.html

Read below for easier understanding.

http://docs.apigee.com/api-services/content/oauthv2-policy