Web service for SAP R/3 user authentication

[Former Member]

Hi Experts,

We are searching for any standard web service/ Bapi to authenicate an SAP user from an external system which needs WSDL to check this . External system will be providing the SAP user ID and password and expects an acknowledgemnt that whether the user is authenticated or not .

Is there any webservice/Bapi available for this purpose? if not how we can achieve this?

Thanks in advance

Sanu

[former_member208598]

This is solved.

[avishek_gorai2]

Hi Sanu,

It is not advisable to pass user credentials especially password as payloads to Web Services/BAPIs in terms of Security. You can use the workaround suggested by Oliver above by exposing a Web Dynpro and calling the URL of the same using the user credential to be authenticated and the checking for the HTTP response as suggested by Oliver, though this also has some security repercussions if not used on the Secure socket layer, but is better that sending credentials in the payload.

Hope this helps.

Regards,

Avishek.

[Former Member]

Hi,

I don't think there is any web service to just check authentication but the work around is simple :

Call any web service which just display some information (for example call STFC_CONNECTION function module as a web service).

As you need to authenticate to call the web service, send the user/password.

If you get the release information, the user/password is OK.

If you get HTTP 401 error, the user/password is KO.

Of course the user needs the authorisation to execute the STFC_CONNECTION function module.

Regards,

Olivier