How do you configure a trusted site?

[Former Member]

We have a hyperlink from our company website to access the supplier registration webpage.   In our logs I can see the error "The referrer is not trusted: http://www.####.com/......aspx  but this is a valid access point for our registration.   How can i avoid these errors?

thanks

Mary Jane

[former_member89217 · Accepted solution]

Hi Mary Jane,

There is a system property set at the enterprise level:

if you have any problems with specific domain names try the wildcard "*"

system

system.security.csrf.trusted_referrer_domains

Enterprise

List of domain names. This list is used to check the HTTP Referer header to see if the request is coming from an authorized page. If several domains are specified then they must be separated using semicolons. Wild cards are not allowed in domain names, but if a single '*' symbol is specified as a domain name then all domains will be trusted.

[Former Member · Accepted solution]

Dear Gary,

we have the same issue but SAP note http://service.sap.com/sap/support/notes/1765606 (or even your advise) does not work

Do you have any further idea to resolve it?

Many thanks!

Mattias

[former_member89217 · Accepted solution]

After correctly setting the system property and restarting the system should solve this issue. If it does not please submit a CSS message and include a screenshot of the  system property setting and a copy of the sourcing application log.

Regards,

Gary

[Former Member · Accepted solution]

Thanks, we resolved the issue meanwhile - the solution is to maintain this parameter in sourcing-user-context. Setting the system property and restarting the system as admin on a let's say system level did not succeed. Maybe it is good idea to update SAP note this way - I am pretty sure you can explain this much better than I do

Regards,

Mattias