Clik here to view.
Why you should really get rid of old password hashes *NOW*
This blog is written in an effort to raise more awareness on securing your SAP infrastructure. In this case specifically on the topic of securing your SAP Password hashes. I will try and avoid being...
View ArticleTamper Proffing server Response
HI experts, we have two level authentications to our portal Login.ie. first level --> userid/ passwordsecond leve l --> entering one time password .. that is recievied via sms. now in the first...
View ArticleDescritpion of all Authorization fields
Hi, Could someone let me know which table has the description or long text for all auhtorization fields? For example ACTV T= Activity Many Thanks, Yolanda
View ArticleSU10 system generated password download to excel file ?
Hello All, i have done the mass password reset via SU10. in the log file i got system generated passwords for 10 different users. Please let me know how to download all the passwords to Excel file. i...
View ArticleClik here to view.
Role Menu for ESS (WDA) in SAP NWBC
Dear experts,I am implementing ESS&MSS using SAP NWBC. For this use the following documentation: Configuration of the Role Menu for ESS (WDA) in SAP NWBC - SAP DocumentationSAP delivers the...
View ArticleClik here to view.
Remove multiple roles from multiple user.
I want to remove multiple Roles from multiple users but there is also condition that in all user there is no all roles exist.in some user there is one or two roles or more roles are not exist .so give...
View ArticleSSO with X509 Certificates not working
Hello gentlemen. By following this guide Single Sign-On with Certificates I´m configuring the single sign on with X.509 certificates, to log on ABAP systems. I´m using OpenSSL to generate the...
View ArticleKanban authorization checks (SU24, PK13N, PK*)
Hi, Does anyone know why the Kanban transactions (PK*) have mostly disabled authorization check indicators in SU24?In PK13N, for example, there is functionality to do a goods receipt (MIGO GR) and also...
View ArticleDisable specific fields in 'MM01`through 'authorization(without ABAP Code)'
Hi Experts, I am a Security consultant and my requirements is to 'Disable' specific fields in MRP1 tab of MM01. So my question is : Is it possible to accomplish this requirement through authorization...
View ArticleLock Inactive/Dormant users in SAP automatically
Hi Guys, We have a requirement to find out a program/report which will lock the inactive dialog users if the user has not logged on for 90 days in the SAP system. This will be implemented in child...
View ArticleClik here to view.
SU24 Customer Data Upload Issue
Hi All,I have started the Security Upgrade activity (system upgraded from NW7.31 to NW7.4, SAP_BASIS 740 SP 0006)in Sandbox system S30 (GTS ABAP).Before starting SU25, I want to take a backup of...
View ArticleHow to restrict max. no. of pages in SP01 spool display ? e.g. to max. 40 pages
Sometimes users open very large spools displaying thousands of pages. We want to restrict maximum number of pages that can be displayed in SP01 , e.g. up to 40 pages. We do not want to restrict size...
View ArticleAuthorization object for profit center
Hi ALL,we are currently in the process of restricting users to a particular group of profit centeres as there have been instances where users have entered into a wrong profit centre and made entries.it...
View ArticleSAP Virus Scan with ClamAV
Hello, if you want use Virus Scan within SAP applications you can use Virus Scan Interface in SAP (transaction VSCAN). There is a OpenSource adapter for ClamAV engine on...
View ArticleSAP license allocation
Hi,I have some querries regarding license allocation,Pl. help me out, 1. I have the user only creates Purchase order and purchase requisition, what user type should assigned? professional,ltd...
View Articleis it possible to give a user read access to an SAP table but to restrict it...
Hi, is it possible to give a user read access to an SAP table but to restrict it to a subset of columns? Thanks,Digesh
View ArticleVT70 restriction by Shipment "output type"
Hi team!I am trying to restrict the access in VT70 by Shipment field "output type". My users need to access only to a few Z output types.In SU24, VT70 is only checking V_VTTK_SHT and V_VTTK_TDS (check...
View ArticleClik here to view.
Featured Content in Security
SP3 for SAP Single Sign-On 2.0 Now AvailableSAP just released the latest Support Package for SAP Single Sign-On 2.0. For more information and to download the new SP3, read Regine Schimmer's blog. May...
View ArticleAcknowledgments to Security Researchers
The SAP Product Security Response Team thanks all researchers and security IT professionals that helped with discovering and solving security vulnerabilities. Their findings have helped SAP to maintain...
View ArticleSAP user assigned with roles from HR-ORG incorrectly
Hi AllI have an issue where a SAP user appears to be receiving role assignments from some HR-ORG object erroneously.I have checked the user's HR positions and organisational assignments and they do not...
View Article