Skip to Content
author's profile photo Former Member
Former Member

User Exit for SAP GUI Login Routine

Hi All,

Does anyone know if there's a User Exit for the SAP GUI Login Routine? I need to perform a quick LDAP look-up during the standard SAP Login Routine.

Thanks,

Matt

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

3 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Mar 22, 2008 at 10:03 PM

    Hi Matt,

    Check the screens of the SAPGUI logon program in SE80 for your options.

    I am not sure what your requirement is, but SUSR001 (FM EXIT_SAPLSUSF_001) sounds like what you are looking for, which is located after the logon, before the menu is loaded.

    Also see this thread: Mass password change? which might help you further, depending on your requirement.

    Cheers,

    Julius

    Note: If you use the search for this topic, then there are some posts which will give you very bad advise about how to avoid password changes. You can seriously damage your system if you directly update SAP user tables from this exit or your own programs. </warning_about_some_posts>

    Add a comment
    10|10000 characters needed characters exceeded

    • >

      > Yes, we're looking to cut-over the SAP GUI logon process to use Active Directory. Can SAP be cut-over to use LDAP authentication? We were told by one of our consultants that the SAP logon process cannot be cut-over to LDAP (hence why we started looking into using User Exits).

      If your ABAP server is running on the Windows OS, then have a kind look on [SAP Note 352295|https://service.sap.com/sap/support/notes/352295]: SAP provides some SNC libraries (actually: wrappers for the Microsoft SSPI) which allow you to utilize NTLM / MS-Kerberos. Most likely you refer to MS ADS when talking of "LDAP". In that case you actually refer to "(MS-)Kerberos authentication" when talking of "LDAP authentication".

      If your ABAP server is running on a different OS, then you cannot use those SNC libraries provided by SAP. In that case you have to purchase a [SNC partner solution|https://service.sap.com/sap/support/notes/66687].

  • author's profile photo Former Member
    Former Member
    Posted on Mar 23, 2008 at 01:41 PM

    Hi Matt,

    It sounds as if you are wanting to achieve a dual logon (a second authentication), which if unsuccessfull should logoff the user authenticated via the first SAPGUI logon.

    I see 2 problems with your requirement if you use this exit for it.

    - 1) Log on, and

    - 2) Logoff.

    ...in that same order.

    See SAP note 37724 and the attachments to SAP note 142724, and this thread here End A User Session via ABAP Program , for example, which have information about using the call 'SYST_LOGOFF' for such tasks.

    The problem I see is that users do not have to complete the second logon prompt, either successfully or unsuccessfully... they can simply open a new session 😔

    Perhaps a Single-Sign-On scenario would be a better solution?

    Cheers,

    Julius

    PS: Does this relate to your other post as well? Do you want to assign the role in the exit?

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Jul 21, 2016 at 02:00 PM

    We can use SUSR0001 user exit for sap gui logon.

    Implementation of SAP logon user exit SUSR0001 - SAP ABAP,SAPUI5,SAP HANA,SAP Fiori,OData,Netweaver Gateway,SAP Workflow…

    But Which exit or badi runs when user logs via web view?

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.