Fiori Launchpad, restrict tiles on Internet

[former_member395548]

Hi all,

I am looking for the ideas when FLP is exposed to Internet.

User is assigned to one of PFCG ESS role, which internally has reference to one group and a catalog. Right now catalog consists of 5 tiles, all 5 tiles are displayed in the group.

Is there a way where we can hide tiles when viewed from Internet and show all when in Intranet?

Scenario 1 - FLP is accessible from both Intranet and Internet, however all apps are not exposed to internet. So user has logged in via Internet, we should only see 3 apps.

Scenario 2 - When logged in via Intranet, should see all 5 apps.

Please let me know if any one has worked in this typical scenario.

[BJarkowski]

I know that’s not a perfect solution to your problem, but you could create additional client in the gateway system, that will be accessed from internet.

Then you could create a rule on webdispatcher that based on the source of connection user would be redirected to appropriate client.

This shouldn’t be to difficult to maintain - just another system in STMS.

The question is how to manage users and their password, but you could implement SAML and this problem goes away as well.

This is a workaround rather than a solution to your problem, but as your requirement are not covered by SAP standard I think that’s better than nothing 🙂

[former_member395548]

Thank you Mr. Bartosz,

Sorry for late reply. I was thinking to block the tile with web-dispatcher denial rule.

e.g. In case I have the tile ID, similar to below

https://hostName/sap/opu/odata/UI2/PAGE_BUILDER_PERS/Chips('X-SAP-UI2-PAGE%3AX-SAP-UI2-CATALOGPAGE%3AZHR_BC_ESSCC_ALL%3A0LTRQP4JK63AL3REJZKGDZX8J')

I should be able to restrict it. Somehow my denial rule is not working.

[former_member395548]

Hi Bartosz,

Maintenance of two clients on production - is it a recommended practice?

Best,

Vikas

[JK]

i like the question, i also miss this Feature in SAP Standard

from my understanding the Standard Setup is to always show all Tiles (also for support reason, People Keep asking for missing tiles if the views are different...) and maybe add comments for those which cannot be accessed for whatever reasons from externally

possible Options i've found so far:

using device type (mobile/tablet) to classify (you can rewrite user-Agent in webdispatcher)

if the user Groups are different, you can differentiate by role
use sap Cloud platform (different launchpad) for external Access

modify catalogservice (odata)?

...

[former_member395548]

Thanks for your reply Jorg.

There is a provision, where end user can perform personalization, create their own home folder (similar to group name).They can add tiles from any of the exiting group they are assigned to and add tiles to their own created folder. Missing tiles support case always be there irrespective.

I was thinking of something like filter ID (Just like SAP Portal) or parameter that we can pass to the URL, based on this URL parameter webdispatcher should be able to hide and show tiles depending on the Internet/Intranet traffic.

[former_member395548]

I am raising OSS message too.