cancel
Showing results for 
Search instead for 
Did you mean: 

same username flows through from UI5 to SAP ECC via Gateway

former_member186491
Contributor
0 Kudos

Hi Everyone,

We need your help in understanding the recommended approach to ensure the same username flows through, from UI5 to SAP ECC via Gateway for audit trail.

In other words, we want to use same user-ID in all three landscapes. So, GW should be using user-ID - dynamically coming from UI5 application.

Example:- Through UI5 Application, assume one user having user-ID "ECCSK" created a record and that needs to be syndicated in back-end SAP ERP. Now, we want "ECCSK" should be used in GW as user-ID and that again should be syndicated to back-end SAP ERP with user-ID as "ECCSK" only.

We can see technical workarounds but not sure if Gateway supports some approach where ECC activity is executed with the incoming (from UI5) logged-in user information. What's the recommended approach?

This happens through SAP PI and known as concept of Principal Propagation. Does SAP GateWay also support this? If not, is there any similar approach?

Thanks for any guideline or clarification around this.

Kumar Saurav.

Accepted Solutions (0)

Answers (3)

Answers (3)

kammaje_cis
Active Contributor
0 Kudos

Principal Propagation is recommended even in Gateway scenario.

Backend users need to be replicated on Gateway server.

masa_139
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Kumar,

In case of Fiori apps, there is no user authentication on UI5 app level.

User authentication happens on Gateway and basic authentication(user and password) UI comes on UI5 app. Gateway to ERP is connected with trusted RFC which enables logon to ERP with same user ID from Gateway. 

Regards, Masa

SAP Customer Experience Group - CEG

ChandraMahajan
Active Contributor
0 Kudos

Hi,

if the users are setup in SAP Gateway server then you can use the same user id and it will be passed from GW to Backend.

SAPUI5 application will be deployed to front end server nothing but the GW server and hence when user executes the UI5 application, it will ask for user credentials and once authentication happens it will log into UI5 application. and then as per user role setup in the backend, he/she will be able to access the application.

Please refer User, Developer and Administrator Authorizations - SAP NetWeaver Gateway - SAP Library and User Self Service - SAP NetWeaver Gateway - SAP Library

Regards,

Chandra