Show TOC

Function documentationAlternative Logon Order Locate this document in the navigation structure


When you choose the alternative logon order, you can select the logon procedures of your choice, and change the order in which they are checked.


When you use the alternative logon order, you can include or remove the following procedures:

  • Logon Using HTTP Fields

  • Logon with SSL Certificate

  • Logon with SAP Logon/Assertion Ticket

  • Logon with SAP Assertion Ticket

  • HTTP Basic Authentication

  • Logon Using SAP User and Password (RFC Logon)

  • Logon Using SPNEGO

  • Logon Using SAML

  • Logon Using User Data Stored in Service

You can change the order of the checks to meet your requirements.

Note Note

If the All Logons flag is set, all logon procedures are checked one by one until a check is successful. If the flag is not set, only the first procedure in the sequence is checked. If it is not successful, an appropriate error appears.

End of the note.

Note Note

A logon procedure is then only checked when the corresponding logon data is also provided by the HTTP request.

End of the note.

Note Note

You need SAP NetWeaver Single Sign-On to use the SPNEGO logon procedure.

End of the note.


To define an alternative logon order, proceed as follows:

  1. In transaction SICF, call the required service or service node.

    Note Note

    If you define the logon order in a service node, the settings are passed on to all services under this node, unless different data has been entered for them.

    End of the note.
  2. Choose Change.

  3. Under Service Data/Logon Procedure, choose Alternative Logon Order. The Logon Order tab appears on the service maintenance screen.

  4. Choose the Logon Order tab.

  5. Select any logon procedures that you do not want to use, and choose Delete Line.

  6. Enter numbers to specify the order in which you want the checks to run.

  7. If you want to go back to the standard logon order, choose Restore.

  8. Once you have defined the defined the procedures you want to use and the order of the checks, choose Save.

  9. If you want all selected logon procedures to be checked until a logon is successful, go to the Service Data tab and select the All Logons flag.

  10. Save your entries.