Authenticate to Web Dynpro application

[Former Member]

Hi,

In our environment we have machines that are accessed by many users. What tends to happen is that one user will log in to Portal and that one session will be used by all of the other users. This means that all of the users that use that session are logged in as the original user.

We have some sensitive HR information that is accessed through Portal via a Web Dynpro. What we need to achieve is that when the Web Dynpro starts, the user is forced to authenticate again. So if "user1" is logged in, then "user2" should be able to run the Web Dynpro and enter their credentials and have it log in as them.

Thanks,

Greg

[Former Member · Accepted solution]

IUserAccount usrAccount = UMFactory.getUserAccountFactory().getUserAccountByLogonId("<logonID>",null);
 
if(usrAccount != null && !usrAccount.isPasswordDisabled()){
   if(usrAccount.checkPassword("<input string>"))
       // Allow user to process
   else
     //throw Exception
}

embed this code with your application, you may achive authetication....

[Former Member · Accepted solution]

Thanks Rajesh. I've given it a quick test and it works perfectly.

Based on that I'll build a custom logon screen to use.

[Former Member]

Greg,

If you want to use the unique userid to login to portal and use different userid/password to access the HR system, check if an SSO is built between the Portal and HR System and if so, delete the SSO between these 2 systems which would force you to login whenever an iView from the HR system is accessed from the portal.

Thanks!

Surya.

[Former Member]

may be you can try with this

In your application, set property sap.authentication to true

[Former Member]

Thanks but that isn't what I'm looking for.

The scenario I have is:

"User123" is authenticated to Portal.

When someone runs my Web Dynpro I want to force them to authenticate again.

The reason for this is that the Web Dynpro displays sensitive information and the user that runs the application isn't necessarily the same user that started the session.

[Former Member]

hi,

I think this is possible by changing the application property.Suppose your webdynpro application has an application called "test". Now double click on test.A view opens, now click on application properties,select new. Now select "predefined" and and then browse to get "authentication". select this and sets its value to true. Now whenever your webdynpro application needs to deployed, it has to authenticated. You can try this.

[Former Member]

Thanks Pinki, but that does not help.

sap.authentication is set true by default. What that property does is ensure that the current user has authenticated to Portal. If they have, the application will run. If they have not they will be prompted to provide their credentials first.

This differs from my situation, because I need to force the user to authenticate even if they have already done so.

[Former Member]

hi,

sap.authentication is set to false by default. That is for authenticating the user again, it needs to be set to true. Just try once.

regards,

pinki

[Former Member]

Thanks Pinki, but sap.authentication is already set to true in my project.