User Authentication

SAP NetWeaver Application Server (AS) ABAP provides authentication and SSO functions for the communication channels supported by SAP NetWeaver AS for ABAP. This includs access from SAP GUI, Web-based access and non-dialog access for communication between systems.

The access management configuration options and the configuration properties of the AS ABAP enable you to configure basic user authentication or a number of Single Sign-On (SSO) mechanisms.

For more information about security aspects of SSO mechanisms, see Integration in Single Sign-On Environments.

For AS ABAP components that are enabled for Web-based access, use the configuration options for the Internet Communication Framework (ICF). You can configure options such as the order of logon checks and HTTP request handlers. The SOAP runtime functions of the ICF enable you to configure authentication for Web service access.

The following sections detail security aspects of SAP NetWeaver AS for ABAP authentication:

• Logon and Password Security in the ABAP System

• Preventing Unauthorized Logons

• Recognizing and Preventing Multiple Dialog User Logons

• Authentication Security for SAP Shortcuts

• Additional Information on User Authentication

AS ABAP Authentication Infrastructure