How the Security and Authentication is applied in SMP 3.0 ?

[neha_mahanty]

Hi All,

I am working on Service Manager 4.1 application with SMP 3.0

At present we are on the implementation phase and soon we will be deploying the application in production.

We need to work on the security and authentication that should be provided to the client devices/user.

I know that one query which comes here is that the security and authentication should be as per client requirement. Still I need inputs/help regarding the same.

Please advise how this is done and where do we need to apply this security features in client/server

Thanks

Neha

Tags edited by: Michael Appleby

[Former Member · Accepted solution]

The recommend security settings for SMP 3 for the Service Manager is for "No auth" as.  This is because when the user connects the Java Code will validate the user information on the SAP System, or the SAP Ticket system (if configuration) and if you have the SMP secuity enabled you would be double checking the same information.

Stephen.

[neha_mahanty · Accepted solution]

Thanks Stephen,

So for user authentication "No auth" is recommended. Apart from that is there any additional security which we should be taking care? , esp if we are working on a DMZ zone

Please suggest

Thanks

Neha

[Former Member · Accepted solution]

Agentry users still be validated ageist the sap system connection, if the user validation fails it will not the user access the get any new data from the backend.  You also have the SMP 3 certificate which will only let user connect with that certificate.

Really you need to make the the firewall is permitting access from outside to the connection port, and that you have all ports between the SMP Server and the SAP Server, the JCO ports and HTTP port (if using push).

Stephen.

[neha_mahanty · Accepted solution]

Thanks Stephen