Client Logon (6)
The client (Web browser) must identify itself in this step. Usually, basic HTTP authentication is used, but this is not mandatory. In our example, the return code 401 is sent from the ICF controller to the Web browser. The Web browser then creates a popup that is used for authentication. The user enters his or her username and password, and this data is sent directly to the SAP System. When the client logs on to the SAP System, the default client and the default language of the application server are used.
The logon data required for a HTTP request handler (or, to be more precise, for the service to which this HTTP request handler is assigned) can also be set in the service table (via transaction SICF). For details on this, see
Logon Data.If the logon procedure fails, further attempts are made before the procedure terminates.
Once logon has executed successfully, an authorization check is carried out.
Next comes
Selecting and Calling the HTTP Request Handler (HTTP Extension)