How to establish SSO between ECC and CRM (both ABAP stacks)
Hello, After CRM system refresh, I have tried to establish SSO between ECC and CRM (both ABAP stacks) by doing export import of certificates (including SSL certificates) in strustsso2 and also...
View ArticleI would like enable security audit log for specific usergroup in SM19...
Hi All, I would like enable security audit log for specific usergroup in SM19 transaction. Can someone help me on this? Regards,Ramakrishna
View ArticleAuthorization based on profile parameters
Dear colleagues, I have had this challenge for a couple of years already and I am assuming that other mid-size implementations have this as well. Problem description: Based on the functional area and...
View ArticleSAP Tables accesses by a tcode
Hi Folks, How can we find all the tables being accessed by a transaction code ? Thanks.
View ArticleSecurity retrofit strategy and best practices
Hello All, We need to understand the process on how to retrofit/sync security roles in the 5 system landscape. Also we would like to know the best practices to synch security with No to very...
View ArticleAuth object F_KNA1_GRP: how to avoid to display specific Account group
Hi Gurus,my aim is to avoid specific users to display customers with specific account group (XD03 transaction)..In order to do this I've implemented Auth object F_KNA1_GRP specifying ACVT = 3...
View ArticleRestricing IDOCs for IT user
Dear All, I want to restrict IT user form viewing FICO IDOCS Can some body help me in finding a good solution I am stuck in my analysis since many days I tried to restricting users via Message type....
View ArticleSAP HR Payroll edit by supplier?
Security experts - Is it not an SoD Violation if the IT supplier/support team edits the Payroll of the customer. The SAP HR support team (Outsourced supplier) should not edit the Payrolls of customer's...
View ArticleIs this possible: SNC connection from SAP GUI to SAP Router, and ...
Hi, I have (stupid perhaps) question. Is this scenario possible: SNC connection from SAP GUI to SAP Router, and non-SNC connection from SAP Router to SAP System. I know how to set up scenario like...
View ArticleHas anyone been able to get Kerberos SSO to work using the AES 256 encryption...
Hi, I have been looking at a number of posts about how to get Kerberos SSO to work in an Active Directory environment using Tomcat, and haven't found anyone who is using the AES 256 protocol to make it...
View ArticleMass add of transaction in PFCG
Dear specialists, It is possible to add more than eight transactions together to authorization object S_TCODE via PFCG?I want to add for example 100 transactions together, but It must be added by...
View ArticleRSECADMIN - Authorization Object applied via role
Hi, I am in RSECADMIN and it states that some of the authorisation objects have been assigned via roles. There are some generated authroisations objects it is stating has been assigned by roles. I...
View ArticleHow to find T-code History with role
Hi Experts, I am facing one critical issue. One user was having access of one T-code but suddenly he is getting message that he is not authorized for that T-code. I have checked any change for his user...
View ArticleSAP Virus Scan with ClamAV
Hello, if you want use Virus Scan within SAP applications you can use Virus Scan Interface in SAP (transaction VSCAN). There is a OpenSource adapter for ClamAV engine on...
View ArticleFR50 auth
Hi all, I am not sure is it a security or FM related question, but I have this problem....While trying to use transaction FR50 and create budget on a certain level in a structure,the program asks for...
View ArticleCOMPOSITE ROLE USER ASSIGNMENT
Hello there,I have got a quick question: I created a Comp.Role with all the Single Roles attached to it and then assigned to all the required users in PRD. Then, the requirement came back saying that...
View ArticleHow to make auth tab Invisible/ Visible in PFCG?
Hi, We have a weired situation here , even after trying the different view option given in PFCG we are not able to see auth tab after opening the Role in PFCG in production syste. But the tab is...
View ArticleBank external Authority Certificate in Web Dynpro ABAP Portal
Hi, We have developed a Web portal application for a Bank.In this application, anyone (within the bank as well as outside the bank) can register their personal and professional information.This...
View ArticleHow to assign SNC name to users.
Hello All, I have configured SAP SNC for one of our SAP system. It is working fine with the SNC name. We have more than 100 users in that system. Adding SNC Names to all the 100 users in SU01 is a big...
View ArticleClik here to view.
Issuer certificate missing in database
Hi guys, Recently received PSE cert response and L1K root , chain root and server certificate. When importing the server certificate I get the following error: These are the existing database entries...
View Article