Password Storage and Transport 

Storage

By using a one-way hash routine, the system converts a user's plain-text password to a corresponding hash value that is stored in the database.

The "one-way" hash routine guarantees that there is no way to compute the original plain-text password from the hash value.

Transport

How the password is protected during transport depends on the front end component used:

·        SAP GUI for Windows

For the transport between the SAP GUI for Windows and the application server, the data is compressed.

For increased security, you can use Secure Network Communications (SNC). With SNC, you eliminate the need to send the password over the network altogether.

·        Web frontend

When using a Web frontend (for example, SAP GUI for HTML or WebReporting), you can have the information transfer encrypted by using the Secure Sockets Layer (SSL) protocol. See also Internet Application Security in the topic Using Additional Security Mechanisms / Providing Privacy.