Problem with a user-password request, urgent please!!

[Former Member]

Hi all!!

I´m consuming a WS on XI with a Web Dynpro ABAP. When I execute the proccess I get an error, because is necessary to introduce an user and password in a popup to access XI.

How can I avoid this request??

[SergioFerrari · Accepted solution]

If you know user/password you can add them in the WS url.

Add sap-user=YOURUSER&sap-password=YOURPASSWORD to the url.

Sergio

[Former Member]

In addition to SSO to connect to XI,

you can also look at PROXies.

See transaction SPROXY.

Proxies to Interfaces on XI can be generated on the ABAP stack. Using SPROXY.

The genrated ABAP classes can be called from your WDA application.

System users are registered for the connection between stacks.

See XI post installation Guide for more details.

So you have a couple of alternatives.

But we strongly recommend you dont use URLs to pass passwords.

If the password must be sent with the SOAP call, speak to you XI consultant about

passwords inside the payload / message header and use HTTPS to do the SOAP call.

regards

Phil

[Former Member]

Thanks for your sugestions.

I put the user and password in the URL because we are working on a local network, and we won´t have problems. Neverthless, I will consider your advices in other cases.

Thank you and regards,

Manuel.

[Former Member]

Hi,

we strongly recommend <b>not</b> to use sap-password for security reasons. Do not enter this directly in the URL as Web browser URLs are stored in a History list and the password would be visible in plain text, even after the browser is closed.

Instead, use the SSO2 functionality for your system and configure your system accordingly. For Web Dynpro ABAP, see also the

<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/af/0489ce55002f44a8c927371bedf719/frameset.htm">security aspects</a> and the section on security in AS ABAP.

Regards, Heidi