Transfer productive passwords from central user administration to a new SAP Fiori Gateway

[boamonster]

Hello Comunity,

to manage user-accounts, I use the central user administration on a Solutions Manager. It's possible to transfer productive passwords from the central user administration to an SAP Fiori Gateway (new SAP system)? I am infinitely grateful for every hint.

Regards, Thomas

[bharathyp]

Hi Thomas,

As much as we would like to provide you with some guidance/suggestion.

Your request seems very vague, I personally fail to see the link between CUA and SAP Gateway system.

What is that you are trying to achieve here?

Best Regards,

Bharath

[boamonster]

Dear Priya, dear Gregor

thank you for your hints.

I've configured SSO from Fiori Launchpad to ERP and HCM back-end systems. It works perfectly.
However, I would like additional protection for HCM applications, e.g. for the salary statement with username and passwod.

The additional protection is a demand of the works council.

I've set in transcation SICF the odata-service e.g. /default_host/sap/opu/odata/sap/hcmfab_mypaystubs_srv to "Alternative Logon Procedure" only with "Basic Authentification" in "Logon Procedure List". It works also perfectly too, but I need a productive password for it to authenticate to the Launchpad (Gateway) again. Please see Screenshot in Attachment (additional OData-Authentification with Username and Password).

This is the reason that I want to transfer productive passwords in the new installeed SAP Fiori gateway-systen.

Is this possible?

Best regards,
Thomas

Screenshot: additional OData-Authentification with Username and Password

[gregorw]

Dear Thomas,

instead of looking for a way to get the password set for the users in the gateway system I would suggest that you look into SSO options. I guess your users should be able to use the Fiori launchpad. If you have a Microsoft Active Directory you might have also a ADFS in place. That can be used for SAML2 SSO. This will also not require any additional license from SAP. Just setup SAML2 in the Gateway system.

Best regards
Gregor