Force Logon for an ICF based HTTP Service

[sandeep_joseph]

Dear All,

Could you please let me know how to enforce explicit logon with a user name and password for a HTTP service configured via SICF. Even after selecting a logon procedure, the service can be accessed without any authentication while accessing it from a browser.

Thanks,

Sandeep

[tobias_winterhalter · Accepted solution]

Hello Sandeep,

What is the full patch of your service? For example: if it is within /sap/public/... it will never require authentication.

Which logon procedure did you choose in SICF?

Regards,

Tobias

[sandeep_joseph · Accepted solution]

Hello Tobias,

My is service is directly under /default_host/

The logon procedure used is Standard, please take a look at the screen-shot to get a better idea.

[tobias_winterhalter · Accepted solution]

Hello Sandeep,

You specified a user and password in the Logon Data box. This logon data will be used for this service. If you want user's to authenticate themselves, you have to remove the user from here.

Best,

Tobias

[Former Member · Accepted solution]

Clear logon Data fields for User and Password.

Logon Checks: Overview

Regards,

Roman

[sandeep_joseph · Accepted solution]

Thanks a lot Tobias, it works!

Regards,

Sandeep