fiori security concern

[#1]

Hi All

We are now receiving security concerns from customer about FIORI.

1.Information Leakage:

     for instance , when we clicked an item , then it failed, and we got the error message which might cause information leakage.

     Is it possible that the backend could provide some general information with no sensitive information involved.

2.remember password option:

     after entering the password and username, the browser will prompt if you want to remember the password. there is security concern to remember password in browser. Is it possible to disable this pop-up window,  that is , is it possible to Set auto complete off in every form that is getting submitted.

Thanks

Message was edited by: Michael Appleby

[masa_139]

Hi Torren,

Is this the first time that customer is going to use web browser? How do they access to their company home page or any other application? Those items are not specific for Fiori and happen to any other applications. What was comment from their IT team? Please share background.

Regards, Masa

SAP Customer Experience Group - CEG

[hofmann]

I can give you many examples where employees do not have access to a browser, or intranet, or internet, or phone.

 How do they access to their company home page or any other application?

Well, what about SAPGui?

About the logon remember questions: I'd opt to go for SSO.