Sapgui 7.50 - Is it possible to save passwords in Logon shortcuts?

[frank_stenglein2]

Hello,

I just tried Gui 7.50 - PL2 - it seems that registry entry
HKEY_CURRENT_USER\Software\SAP\SAPShortcut\Security
doesn't work any more. Is there an alternative possibility to save passwords?

Thanks.
Frank

[jude_bradley · Accepted solution]

Sorry, but this is most definitely not a good idea.

the passwords are saved in plain-text and this is a definite security risk.

See note

146173 - SAPShortcut: Saving password in SAPShortcut - not recommended

Regards,

Jude

[nelis]

It would be great if SAP allowed you to store passwords in the SAP Logon Pad, encrypted of course. Then simply give the option to provide a single password to access all your connection entries(like a password manager).

For now though I just use the freely available KeePass - create separate entries for all my SAP systems adding the username and password in the fields provided and then use the following example string in the URL field:

cmd://sapshcut -max -guiparm="hostname.com 00" -system=DEV -client=001 -user={USERNAME} -pw={PASSWORD}

When you click on the entry for your SAP system it executes the above string replacing username and password placeholders with your credentials automatically. This information is all encrypted of course and accessible with a single master password. Saves me having to enter my password each time.

[former_member284867]

How would you access a Java based system with this URL? I am thinking about PO or CPS here.

[frank_stenglein2]

Ok. Then it would be good if in future there would be a secure possibility to a save passwords within Saplogon 7.50 (without using SSO). Meanwhile I keep using 7.40.

Regards,

Frank

[rajan_thomas]

Yes 7.5 Password field is disbaled,

but still it is doable.

1. you can use 7.2 GUI to create the Shortcut with the password

2. open the shortcut file <PRD>.sap with NOTEPAD

3. copy the Password line [eg., Password=PW_15A1203694B5791F846B]

4.now go to the system using 7.5 GUI and open the <PRD>.sap open with NOTEPAD

5.add the Password line [eg., Password=PW_15A1203694B5791F846B] in same location.

6. save it and open it will work.

Regads,

RT

[former_member596897]

SAP GUI 7.60 Possible to save http://abapstudy.mybb.ru/viewtopic.php?id=16

[former_member609032]

"Then it would be good if in future there would be a secure possibility to a save passwords within Saplogon 7.50 (without using SSO)". Does this imply that there is a way to save a shortcut on the 7.50 SAP Logon w/ an SSO token saved for login (i.e. vice a password)? If so, what does that look like in the SAPUILandscape.xml in terms of syntax/nomenclature? Does anyone have a sample?

[frank_stenglein2]

Great! Thanks Nelis!

[marius_piedalluvanwyk2]

It is sad to see that SAP has not embraced keychains etc. to solve this problem, instead promoting insecurity via password fatigue.

https://en.wikipedia.org/wiki/Password_fatigue

On Mac there is the keychain, and in windows there is similar ways to encrypt passwords using the user's system logon password.

Also most of my filesystems are full-disk encrypted.

I'm sure there are ways to have done this securely...