Re: How to audit the in-use encryption algorithm of commoncryptolib?
When using SNC between saprouters, the maximum available QoP is always used. From the SAProuter documentation, is the following true in your case: The following are prerequisites for setting up an SNC...
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
yes, the solution is described above. It is also possible to have users in Domain (A) and users in Domain (C) logon to the SAP system (B) if there is NO trust between domains. ThanksTim
View ArticleRe: How to audit the in-use encryption algorithm of commoncryptolib?
Hi, I think you are fine. 1. means authentication only (an attacker can see and manipulate data), 2 means integrity protection (attacker can see data but can't change them) and 3 means privacy...
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
Thanks Tim for your prompt responds, appreciated.I read the post "Single Sign-On with Kerberos" related to the product NW SSO 2.0. http://scn.sap.com/docs/DOC-40178but I did not clarify with the author...
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
Hello Jinlong, As Tim already mentioned, the first step to have your scenario working is to ensure that both domains __trust each other__. This is a must. Additionally to that, if I correctly...
View ArticleRe: Roles to be removed from multiple users in BI
Thanks Colleen,Yes I m removing composite role. However I tried above steps but still its not working. Now I am removing roles using SU01 700 times for 700 users.Still waiting for short cut.
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
I also said that it is possible without domain trust. The most common scenario is that the domain where the principal resides for the SAP system trusts the domain(s) where the users authenticate....
View ArticleRe: Roles to be removed from multiple users in BI
Hi Tufail There is not straight standard function to do what you are trying to do. I've just explained why SU10 didn't remove the roles for you As Julius has mentioned there are BAPIs but you would...
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
Thanks Tim, I got your idea. If needed, I will contact you. Kind Regards,Jinlong
View ArticleRe: SAP SSO (SNC) for ABAP - multi domain?
Hi Guilherme, Thanks for your detailed info, I got the SAP guide and found the relevant info you mentioned. Kind Regards,Jinlong
View ArticleIs there a way to retrict access to SSN & DOB fields in IT002;IT0021;IT0704...
We have a requirement we have been asked to limit the access to SSN & DOB fileds in SAP.we came to know that IT002,IT0021 & IT0704 will have the SSN & DOB details.Can we restrict access to...
View ArticleRe: Is there a way to retrict access to SSN & DOB fields in...
Vamshi, Restricting a specific field in an Infotype to be viewable only for one set of user while not viewable by another set of users is possible. However, it is not done through security settings,...
View ArticleHow to easily maintain Parameters IDs
Hello, I am trying to find a smart way to maintain Parameters Id. Let me explain my situation : we are a big company with several plants/groups and we need to maintain parameters based on plants/group....
View ArticleRe: How to easily maintain Parameters IDs
Hi, I would suggest to start looking at identity management solution (e.g. SAP IdM). You can build automatic PID determination in IdM. I assume that you don't have CUA at this moment. CUA would help...
View ArticleRe: Roles to be removed from multiple users in BI
Tufail, Two questions and then some thoughts: 1) Are you using CUA ? 2) ""NO changes made to user XXXX" - is it saying for all 700 users ? Thoughts: Trying to remove multiple roles from 700 users (700...
View ArticleRe: S_SERVICE values consuming a web service
You must either execute it from SE80 or you must use the kernel trace to populate "original data" for SU22, as that fills usobhash as well. Just calling the WS or WYDA is not enough. See Martin Voros's...
View ArticleRe: User unable to view requisitioner email in PO
Richa, This does not look like a security issue. Please check the Smartform/SAPScript that you have used. Regards,Shivraj Singh
View ArticleRe: Getting an error- No texts found for authorization Z**** in version M...
Saurabh, Are you facing the error (1) when manually creating any analysis authorization in RSECADMIN or (2) when running the RSEC_MIGRATION utility. or both ? If the case is (2) only then you can look...
View ArticleRe: Authorization issue- MB1A
Dear All: We have the same issue, user from plant B made goods movementes in MB1A for a Production order for plant A, with material for plant B, so the authorization objects are correct, but is a way...
View ArticleRe: Authorization issue- MB1A
Hi Madhu, You can restrict user at plant level using authorization object M_MSEG_WWA . Contact your BASIS Consultant & ask him to remove other plant which you want to restrict. For more object...
View Article