Configuring SAP HANA XS Session Security

For session security, SAP HANA XS automatically configures the session cookie xsSessionId with the attribute HttpOnly. However, the attribute secure is not supported. If you use a reverse proxy (instead of SAP Web Dispatcher) in your system landscape, you can add this attribute by configuring the reverse proxy with a header rewrite rule on the Set-Cookie header.

For more information about defining access to individual application packages in SAP HANA XS, see SAP Help Portal at http://help.sap.com/hana_platform Development and Modeling  SAP HANA Developer Guide for SAP HANA Studio  Setting Up Your Application  Creating the Application Descriptors  Enable Access to SAP HANA XS Application Packages .