API disability in user management

[former_member780069]

Hi Experts,

Can someone please tell me more about API disability in user management. In our landscape, some unauthorized users can access to backend sap system so I was asked to check and disable this functionality. is it anything to do with API disability?

Thanks,

Kavitha

[former_member780069]

Hi kavitha,

Is your question is that you have already added the backend system in the API management system and exposed the API ? And, now anyone having access to the API is able to access the backend service?

If yes then please read about the policies because the security area is one of the really good feature in API management.

You need to apply a PRE-FLOW policy condition on the API, this way the API will be secured before calling the back-end.

Regards,

Vikas

[Murali_Shanmu]

Hi Kavitha,

I don't understand your question. I have not heard of API disability. Which solution are you talking about ? Unauthorised users should never be able to access the information from the backend SAP system. Maybe if you can elaborate on your scenario, systems in your landscape and access patterns, we could help provide some suggestions.

Cheers,

Murali

[vicky20691]

Hi kavitha,

Is your question is that you have already added the backend system in the API management system and exposed the API ? And, now anyone having access to the API is able to access the backend service?

If yes then please read about the policies because the security area is one of the really good feature in API management.

You need to apply a PRE-FLOW policy condition on the API, this way the API will be secured before calling the back-end.

Regards,

Vikas

[Sjm]

Protect your API from unauthorized users using Auth2.0

https://help.hana.ondemand.com/help/frameset.htm?b7b589334d444293a2a91e0ef4234136.html

Read below for easier understanding.

http://docs.apigee.com/api-services/content/oauthv2-policy