copy / paste its URL and use the same session

[Former Member]

Hi,

      I have a problem of security with the URL in ITS.

      If I copy a URL in ITS and then I paste the same URL in other PC or in other explorer the original session is used.  

      The service is using a generic user in the alias (SICF) and a own login was create in the program.

      How I can avoid this ?

Thanks.

[Former Member · Accepted solution]

Hi Pablo,

Just make sure, for your ITS service, you have the following settings in SICF:

1. In 'Logon Data' tab, the logon Procedure is "Alternative".

2. The Re-authentication is on, ie, De-activated system-wide : should be "No"

3. Logon Procedure List should have 'Logon through HTTP Fields' only.

Publish the entire service after change from the above and check.

Please let me know if the above solves the problem.

Regards,

Utkarsha

[Former Member · Accepted solution]

Thank Utkarsha,

Unfortunately we have the component version SAP_BASIS 700 SP28.

In this version "Re-authenticacion" and ""Logon through HTTP Fields" does not appear.

Only we can change the logon Procedure to "Alternative".

Do you know if there is any way to configure the same in our version ?             

Regards,

Pablo.

[Former Member · Accepted solution]

Hi Pablo,

In that case, you may just set the user parameter icf/user_recheck to 1 through transaction RZ11 and Keep the Logon Procedure as 'Field Authentication' only.

Let me know.

[former_member194364 · Accepted solution]

Hi Pablo,

Utkarsha is correct here.

for the SAP_BASIS 700

"Fields Authentication" = "Logon through HTTP Fields"

Regards,

Oisin

[Former Member]

Hi Utkarsha and Oisin,

                                    Basis is working with this point but they can´t solve yet.

                                    They are doing some test and looking for the solution to the information received.

I'll let you know.

Thanks.

Pablo.