Skip to Content
author's profile photo Former Member
Former Member

Call an other service with a different login and paswword

Hello

From my BSP application I need to add a link to a BEX service. To do, I need to set the login and password with a hidde method (User does have to fill login and password) ...

Is a method is available to do ... ?

Message was edited by: Jerome FORTIAS

Add comment
10|10000 characters needed characters exceeded

2 Answers

  • Posted on Jul 05, 2004 at 09:24 AM

    Hallo Jerome,

    There are easy methods to transfer the username and password via the URL. <b>However, this add major security risks.</b> (One example, this information is suddenly stored in the browser history.) If you really insist on using this technique, please check documentation.

    The better technique to do this, is just to configure SSO2. Then a SSO2 cookie is issued, and with the correct configuration it is accepted by all other systems. Currently the SDN home page has a good article on how to configure SSO2.

    Alternative, have users use X.509 certificates. However, this is a lot of work, as software must be installed on each PC.

    ++bcm

    Add comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Jul 07, 2004 at 08:27 AM

    May I could use a form and http post to transfert login and password, but the deal is what are names of this parameters ?

    Do you have a example of URL including password and login ?

    SS02 could ba a good solution, I'm going to do what you suggested ... Thanks

    Add comment
    10|10000 characters needed characters exceeded

    • Yes, if you use a form it is better. Because then the actual data is in the POST, and not in the URL. Of course, switching first into HTTPS mode is still better 😊

      Use form fields sap-user, sap-password, sap-language and sap-client. Look at some sample pages from BSP SYSTEM to see how we do it.

      ++bcm