E-signature without the username filled out?

[Former Member]

Hi!

I have a customer that need to use the e-signature functionality but to be compliant they need to fill in both the username and the password and they can't have this automatically filled in by SAP.

Is there any way to disable the auto fill functionality or is there a badi or any other way to get rid of it?

Kind regards,

Kristoffer Pehrson

[Former Member]

....or make a modification in function SIGN_SUBSCRIBE

[Former Member]

Hi!

Thank you for the information but I find it a bit cryptic. Have you done this? Does it work? Can you give me some more information about where I can modify this function?

Kind regards,

K

[Former Member]

Hi.

For the moment I'm playing around in debugging mode in a sandbox system, but it looks like there is al lot of different checks where you need the signature-user-name......checking e.g dublicate signatures ++

Erik

[Former Member]

Hi again Erik,

That will not be a problem. We will fill in the username but we don't want it filled in when the popup appears. That should not be so hard to implement..one would think. I don't know why SAP hasnu2019t implemented a config setting for this.

Kind regards,

Kristoffer Pehrson

[Former Member]

OK

...maybe an abap'er can test out this modification for you (in a sanbox?):

Function SIGN_SUBSCRIBE

*--------------------------------------------------------------------
*     Signaturpopup mit Strategie
*--------------------------------------------------------------------
*>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>46Canfang
*     Ermittelung der Anzahl von Einträgen in Puffer für Einzelschritte
      DESCRIBE TABLE BUF_STEP LINES L_LINES.
*    Signaturmethode wurde bereits in Baustein SIGN_INFO_READ ermittelt.
      IF RC80D-SIGN_METHOD IS INITIAL.
        RC80D-SIGN_METHOD = C_EXTERNAL_PROD_WITHOUT_VERIFY.
      ENDIF.
*>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>46Cende
      CLEAR RC80D-FLG_CANCEL.
      CLEAR RC80D-FLG_NO_AUTH.
      RC80D-FLG_SYNCH = FLG_SYNC_IMP.
*      CALL SCREEN 3000 STARTING AT 10 10.
      CLEAR FLG_COMMENT_CREATED_EXP.                        "46C

*--------------------------------------------------------MODIFICATION -->Kristoffer Pehrson 23.09.2010
      CLEAR: RC70D-SIGNER, RC70D-FULL_NAME.
      RC70D-FLG_SIGNER_CH = 'X'.
*--------------------------------------------------------MODIFICATION <--Kristoffer Pehrson 23.09.2010


      IF NOT FLG_COMMENT_REQ_IMP IS INITIAL.                "46C
*       Kommentar erforderlich
        L_FLG_NO_COMMENT = C_YES.                           "46C
        WHILE NOT L_FLG_NO_COMMENT IS INITIAL.              "46C
          IF L_LINES = 1.                                   "46C
            CALL SCREEN 3101 STARTING AT 10 1.              "46C
          ELSE.                                             "46C
            CALL SCREEN 3100 STARTING AT 10 1.              "46C
          ENDIF.                                            "46C

[Former Member]

Just so we are starting from the same point - are you using the digital signatures as part of DMS?

The default behaviour (when using SAP username/password) is that the user has to fill in at sign time.

[Former Member]

Hi Espen,

We will be using it in both DMS but also in QM, PP, MM and Solman.

Is there a way to deactivate this or is it decided based on signature strategy? When I test it I get the user name pre-filled by the system.

Kind regards,

Kristoffer

[Former Member]

Some checks:

In the IMG; ca,dms, approvals - "define signature strategy" . What signature method is used for your signature?

Do you trigger it on a status? (just checking)

Espen

[Former Member]

Did some more checking. The user name is filled in, but not the password.

And this is not good enough in this setting? Even though we can control quite stricly who signs?

Espen

[Former Member]

Hei Espen,

No this is not OK in the pharmaceutical industry. FDA state that you have to input two parts to be compliant. In this case that would be username and password.

I think that it's strange that there is no way to disable this. We haven't even been able to do it by using ABAP.

I guess I'm not the only one with this problem so it would be interesting to see if there is anyone else that have this problem.

[Former Member]

Hi Kristoffer,

Suppose you dont make a breakthrough on this issue, propose you take a look at the attached casestudy revolving round a similar scenario like yours used to satisfy the requirements of the FDA regulations regarding digital signatures.Gives you several options for authentication like 'User verification using R/3 password/external security product with,w/o verification'

http://media.techtarget.com/searchSAP/downloads/UsingDigitalSignaturesEMconvtSearchSAP.pdf

Regards,

Pradeepkumar Haragoldavar

[Former Member]

Odd indeed - and I mean both the requirement to input username and the fact that SAP doesnt allow it.

Given that it is used in the pharma industry, it would be odd that they didnt support such a hard requirement.

Maybe worth sending in a message?

Espen

[Former Member]

Hi Kristoffer,

The username and password are very very important and key fields of sap security system. You can't change or modify this.

The user name is unique and the heart of security system. This is not feasible.

Hope this will resolve the query.

Regards,

Ravindra

[Former Member]

Hi,

I don't think you have understood me here. I understand that you can't skip these fields but what I want to do is to have them blank and then the user have to fill them in them self. Today the name of the user is filled in when you get the popup and you can't change it.