cancel
Showing results for 
Search instead for 
Did you mean: 

Login Pops-up when navigating to EFP

owen_carnes
Participant
0 Kudos

I have SAP EP 7.01 running currently. I have the portal set up for external access through SAP Web Dispatcher. Access from off our network works just as expected. I have SSO to the backend systems set up, and automatic authentication for the portal also set up, so users using their work computers on the network can access the portal without manually logging in at all.

The problem arises when someone tries to access the portal from off our network, they get a pop-up window asking them to "Connect to" the portal. Whether the user enters a username and password or not, they are still taken next to the normal Portal Login page. So, I am trying to get rid of the unwanted pop-up.

My guess is that it has to do with the automatic authentication being setup for the portal. Maybe the portal is looking for that authenticated user on the network and isn't finding it?

Any ideas?

Thanks,

Owen

Accepted Solutions (1)

Accepted Solutions (1)

former_member182254
Active Participant
0 Kudos

Hi Owen,

The new SPNEGO login module described in this blog: and available for download from this note: https://service.sap.com/sap/support/notes/1457499 as an add-on for any 6.40/7.0 release supports URL parameter "spnego=disabled" which will suppress the initiation of the SPNEGO authentication. One solution could be that the URLs for external users are re-written by the WebDispatcher to include this parameter or another approach could be that those users access the Portal with this parameter in the URL.

Regards,

Dimitar

owen_carnes
Participant
0 Kudos

Dimitar-

Adding that parameter removed the pop-up, and it is working just as expected now! Thank you for the help!

-Owen

Answers (1)

Answers (1)

owen_carnes
Participant
0 Kudos

I have done more research, and have found a couple places that say Kerberos Authentication for the Portal is not compatible with the Internet (the external facing portal). I realize that SPNego wouldn't get a username that isn't on the network, but couldn't the same portal be exposed to the Internet and Intranet and have the authentication working for the inside and not the outside? Do you think this is the cause of my problem?

Thanks,

Owen