cancel
Showing results for 
Search instead for 
Did you mean: 

SAP GUI For HTML Error A:ITS_P:019 XSRF no sec_sesstoken

Former Member
0 Kudos

Dear All;

One of our clients need the web access for SAP GUI so I did the required, and activated the required services.

http://IP:port/sap/bc/gui/sap/its/webgui

I am able to login using my sap user ID, and password, but the issue happens after I login. I get the following message: This session terminated due to inactivity:

And then I get the error: A:ITS_P:019 XSRF no sec_sesstoken

Any help will be appreciated.

Best Regards

~Amal

Accepted Solutions (1)

Accepted Solutions (1)

former_member194364
Active Contributor
0 Kudos

Hi Amal,

What Integrated ITS version are you using? BASIS and Kernel levels?

For the error "A:ITS_P:019 XSRF no sec_sesstoken", please refer to the
below notes:

1675491 ITS: CALL BROWSER and termination of a session

1481392 Cross Site Request Forgery Protection for ITS

1586053 ITS Up/Down: fix for new security applet

Regards,

Oisín

Former Member
0 Kudos

Dear Oisin;

Thank you for your reply.

I am using SAP ECC 6.0 EHP5, kernel release 720 Patch Number 90, and SAP SAP_BASIS 702 level 11.

How can I know what ITS version I am using?

Best Regards

~Amal

former_member194364
Active Contributor
0 Kudos

Hi Amal,

This information tells the release of ITS you are on. It is ITS 720

You will need to upgrade your Kernel.

See for example the KBA

1655770 - Solman_setup Terminates immediately with a popup
error message : "Session terminated due to inactivity"

Solution is that in the

SAP note 1611466 Note 1611466 - Archive not extracted
due to incorrect timestamp check

Latest 720 kernel is patch level 426

Regards,

Oisin

Former Member
0 Kudos

Dear Oisin;

I upgraded the kernel as you recommended, and now after I login with the username and password i get stuck with the following screen:

A note to mention that I stopped getting the previous error.

Best Regards

~Amal

Former Member
0 Kudos

Dear Oisin;

Thank you so much. I fixed the previous error by adding the the same link to the trusted sites under internet options, and it worked

Just a small quick question: can I use sap router string with SAP GUI for HTML? So far I used it using a VPN connection, but I was wondering if i can use sap gui for html using sap router string.

Best Regards

~Amal

former_member194364
Active Contributor
0 Kudos

Hi Amal,

Re: using SAPGUI for HTML/WEBGUI using sap router string.This is not possible to the best of my knowledge.

If you want to access the WEBGUI via the Internet - recommendation would be to use a SAP Web Dispatcher (to act as a Proxy) - which then in turn connects to the SAP Netweaver that hosts the ITS services.

Regards,

Oisin

Former Member
0 Kudos

Dear Oisin;

Thank you for your big help you gave me. I was able to do it public on the by opening a public port for the web gui html on one of my domains, and it worked, and i did need to use the sap web dispatcher.

Thanks again

Best Regards

~Amal Aloun

antonio_steinhuser
Participant
0 Kudos

Hello,

we have a similar problem when we want to use WebGui to access our SAP System.

When we start the WebGui, we get the login Screen. After filling username and PW we get this Error Message:

A:ITS_P:019 XSRF no sec_sesstoken

Our environment: SAP ECC 6.0 / Linux, SAP_BASIS 7.00, actual SAP Kernel 720_REL

Who can help?

Gruß

Toni

Former Member
0 Kudos

Hallo Antonio;

Have you activated service /sap/bc/gui/sap/its/webgui

/sap/public/bc/its/mimes

Viele Grüße

~Amal Aloun

Answers (1)

Answers (1)

antonio_steinhuser
Participant
0 Kudos

Yes,

but now found the solution for the problem!!!

See SAP Note 1481392

I delete the Parameter

~XSRFCHECK = 1

After delete this parameter access via webGui is possible again.

Gruß

Toni

former_member194364
Active Contributor
0 Kudos

Hi Toni,

It is not recommended to disable ~XSRFCHECK

Regards,

Oisin

antonio_steinhuser
Participant
0 Kudos

Yes, but this solved my problem.

Gruß

Toni

former_member194364
Active Contributor
0 Kudos

Hi Toni,

I dont doubt that it resolved the issue being experienced, but disabling Cross Site Scripting for the WEBGUI is not recommended.

Regards,

Oisin

antonio_steinhuser
Participant
0 Kudos

Hello Oisin,

do you have an other solution formy problem?

Gruß

Toni

former_member194364
Active Contributor
0 Kudos

Hi Toni,

Would be best to open a new thread (as this one is already answered)

Include your system patch details; SAP_BASIS 7.00 ....., SAP Kernel 720_REL ......

Regards,

Oisin