Skip to Content
avatar image
Former Member

Approve workflow via only a link (through PI)

Hi experts,

I need to send a mail for to approve a workflow.

My idea is approve it through only a link in the mail body (don´t needing to enter user or password).

Is it possible with PI or another way?

We can´t approve sending mail to SAP (using SCOT transaction), security is not agree with it.

In summary, I need eject a function RFC (that will approve workflow) pressing a link don´t needing to enter credentials or opening any application.

Thanks a lot!

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Jun 05, 2017 at 04:46 PM

    Security don't agree to approve by email, but an unsecured link with no authentication is fine!!? It's no wonder so many companies get hacked these days...

    Anyway, if that really is your requirement, you can easily create a web service or web app using whatever tools you're most comfortable with, include whatever parameters you need - work item id, user, result (approve / reject). Make it public and add functionality to process the parameters accordingly (FM SAP_WAPI_DECISION_COMPLETE).

    Then just provide a matching link in your email with e.g.:
    http://www.yourcompany.com/approval.htm?wi_id=1234&user=homersimpson&result=approve

    Easy.

    Please note that almost anyone with any reasonable amount of experience and security know-how will advise strongly against doing anything like this.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Agreed Mike,

      Maybe there is something vital he is missing in his description... I cant see any sane security person signing off on this. It is just asking for issues.

  • Jun 07, 2017 at 08:35 AM

    Hi,

    So the focal point for this is, user don't want to log in and type password for an approval step.

    If that is the case, then it makes way more sense to just use extended notification to send the approval steps as html links in email. Then set up single sign on on all company machines. And then you have achieved everything in a more sensible way.

    Kind regards, Rob Dielemans

    Add comment
    10|10000 characters needed characters exceeded