Digital signature in QM

[Former Member]

Experts,

We have dig. signature setup and working fine as expected. User is prompted to enter R3 password whenever he has to digitally sign. I read SAP press QM book about this topic and also this blog post. I wanted to check if its possible to by-pass password entry by any chance? Question from security team is that user has already logged into SAP via SSO. Why should he enter password 1 more time? Before I reply that this is how dig. signature works, I wanted to confirm here with the experts if there is any solution for this. Please note that we do not use any external password/token generator software that works with SAP for dig. signatures.

BR,

Aspire

[former_member42743 · Accepted solution]

Well, at the time of the signing how do you know it really is that person. Maybe they left their computer unattended. Maybe one person signs on in the work area and multiple people are sharing the account.

The validation needs to be done at the time of the approval.

Craig

[Former Member · Accepted solution]

Thank you Craig. It makes sense now why password entry is required.