In ERP, we created a FM which calls the FM CL_GUI_FRONTEND_SERVICES to get the IP address of the client, then the end user will logon successfully only when the IP/account mapping check is passed.
May I ask does ECTR support such logon enhancement...