Labels
ABAP Web Service Configuration for SAML Sender Vouches
Authorizations
Best Practice - How to analyze and secure RFC connections
Best practice - How to perform a client copy when CUA is active
Best Practices - Display Audit Roles
Best Practices - How to convert certificates from a .p7b file to Base64 (.cer) format
Best Practices - How to find TCodes changed after upgrade regarding SU24-data
Collection of SAP Security Tables
Configure Trust for SAML SenderVouches authentication ( ABAP)
Documentation of SAP Identity Management APIs
Gateway security settings - extra information regarding SAP note 1444282
Global Security Alliance (GSA) - Now IA4SP
Issue with Custom Risks option in RAR
List of ABAP-transaction codes related to SAP security
OAuth 2.0 - Constrained Authorization and Single Sign-On for OData Services
Recommended Interoperable WS Security Scenarios on AS ABAP
Rewriting WSDL for Metro 2.0 (Web Service Runtime)
SAP NetWeaver Identity Management - Overview
SAPPress Single Sign On with SAP
Security FAQ
Security Functionality Wishlist-Topics
Security Guidelines
Single Sign on for Web Services
Single Sign on for Web Services from .Net
Single Sign On using Active Directory and Centrify DirectControl
Single Sign on using SAML with Apache Axis2 (Web Service Runtime)
Single Sign on using SAML with IBM DataPower (XML Appliance)
Single Sign on using SAML with Sun Metro 2.0 (Web Service Runtime)
Single Sign-On with SAML 2.0
Single Sign-On with SPNego (NWAS Java)
Testing Mobile Leave Request Application
Upgrade Steps for Security - quick reference
User Mappings in the Authentication Framework of SAP NetWeaver Application Server (AS) Java
Comments (3)
Oct 05, 2007
Kristian Lehment says:
All questions related to security in SAP products should be posted in the SDN se...All questions related to security in SAP products should be posted in the SDN security FORUM which can be found here: https://www.sdn.sap.com/irj/sdn/forum?forumID=208
Questions posted in the WIKI area will not be answered.
Dec 10, 2009
James Tucker says:
Security with transaction SQ03 should be about only letting users see and ...Security with transaction SQ03
should be about only letting users see and execute what user groups are assigned to them. Analyst can change infosets in client with change and maintain for S_QUERY but they should not be able to see and execute queries when they are not assigned to the user group. Out of site out of mind.
Dec 11, 2009
Julius Bussche says:
Hi James, I recommend first opening a discussion thread in the security forum, ...Hi James,
I recommend first opening a discussion thread in the security forum, and then creating a wiki based on the results - and not a comment to the main page.
Cheers,
Julius