Securing BSP's

[Former Member]

Hello,

Question for you experts out there. At the moment all of our BSP's require a login. However, we'd like to make a single point of entry for the multiple BSP Applications we've created and we'd like that "entry point" to be open for all to use. However on this page we'll have the links to multiple other BSP Applications all requiring login. How or what is the easist way to set this up?

[Former Member]

Hi Craig-

In case you are looking for some more information, please look at a previous conversation on this forum. You can search for the message:

BSP-MVC: How do I end an ICM Request (terminate BSP application)?

Brian helped clarify many issues via his input.

Hope this helps.

- Vik.

[gregorw]

Hello Craig,

have a look at the documentation about User Concepts at:

http://help.sap.com/saphelp_webas620/helpdata/en/02/4b528f2a8d11d5991f00508b6b8b11/frameset.htm

Regards

Gregor

[Former Member]

Should these multiple BSP's all require login, or would you like the users to be able to connect anonymously?

If the latter is the case, you can set up anonymous login in SICF, preferably specifying a dedicated BSP user (type communication).

Trond

[Former Member]

The first page is a system list with links to all our systems. The following pages should require the login, a specific user login. I tried it by setting the a user automatically on the system list but then I was never prompted for a login when I hit one of the links

[Former Member]

Here is what I did to accomplish the task.

First I created a new profile Z_BSP_[something]

This role has the authorizations for the S_ICF (Internet Communication Framework)

ICF_FIELD - "SERVICE" is checked.

ICF_VALUE - Here I entered a keyword for the BSP application. (more than one can be entered here as well)

Then under SICF I found the BSP Applications that I created and I doubled clicked on it. On the dialog that pops up there is an input field called "SAP Authorizatn"in this field I entered the keyword for the BSP.

So a user with the appropriate role can open the appropriate BSP.

For example:

BSP:

"ZLOCKED_USERS" - Displays a list of locked users on a system.

SAP Authorizatn: "LU_LST"

SAP Role:

Z_BSP_LST_LU

ICF_VALUE: "LU_LST"

So only users with the SAP Role "Z_BSP_LST_LU" can now call the BSP "ZLOCKED_USERS"