Multiple Logon disable

Dear All ,
while multiple logon are performed.SAP pop-up a message with 3 options
1.terminate logon
2.continue with the logon
3.continue with the logon terminating other sessions.
Here we Want to disable the 2 option that is : continue with the logon.
Here we came to know : we can add the following parameterto the instance profile
logon/disable_multi_gui_login
Pl guide with the steps how to add this & where ( Tcode & procedure ) .
Regards

Hi,
Please go through the below SAPnote to get better clarity on it.....
Note 142724 - Prevention of multiple SAPGUI logons
PS: If this parameter is set to value 1, multiple SAPGUI logons (in the same client and with the same user) are blocked by the system. The parameter is effective during the SAPGUI logon. Logons to the system using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not influenced by the profile parameter. Furthermore, SAPGUI transaction calls (iViews) that are placed through the Workplace or the Enterprise Portal are not controlled with regard to multiple logons...
Regards,
PY

Similar Messages

Multiple Logon Disable in SAP

Hi,
I have disable the multiple login's in SAP through RZ10.When users network session was lost any reason.he will not able to login again
because the only option "Terminate this login " Showing . I want to enable other option "Continue with this logon & ends any other logon"
so the user are ends the free session.Please help
Rgds
sudarshan

Hi,
Please check the setting as '1' as in following screen shot .
You will find this error after setting as

Disable the multiple Logons in ECC6 and allowing few users

Dear All,
I need to disable the multiple Logons in ECC6 and allowing few users, can multilogin in system.
I have seen that the parameter login/disable_multi_gui_login and login/multi_login_users can be set.
But need to know did any once use in Ecc6 system and what values to be given in login/multi_login_users.
Please suggest .
Regards,
Kumar

I have found an exmaple on the web of using javascript (it opens a child window that polls the parent window, and invalidates the session if the parent window is closed). I agree there always appears to be loop holes around most of th e solutions i've come across.
I had the same idea about invalidating any previously known session for the same userid, I'm pretty new to the java/web app world so I'm struggling with finding the information I need. I couldn't find any methods to call to invalidate another session, I only came accross example where the current session invalidated its own session via call to the session object, do you have any idea how I would do that for other sessions.
Mant thanks for your input.
Derek.

Cannot disable multiple logon

Dear all,
I want to disable multiple logon in my system, I have add parameter: login/disable_multi_gui_login value as 1. But it can't disable multiple logon after restart sap. Could you advice?
Rdgs,
Emily

Hello Emily
1. Try setting the parameter in default profile (DEFAULT.PFL).
2. The parameter restricts multiple logon throguh sap gui only. I hope you are testing multiple logons through sap gui.
Cheers,
Tapan

Disable multiple logon from SAP NetWeaver Portal

Hello
I'd like if there is a parameter inside SAP NetWeaver Poral to disable multiple logon with the same account(like login/disable_multi_gui_login for ABAP).
Thanks in advace
Regards
Stéphane

Look at service.sap.com
This authentication only works for S-users (as well as SAP employees) who are active accounts in SAP's AD. That works via the internet for SAP customers and employers (e.g. from each other's networks but their own devices) as well.
With a SAML IdP you have a lot more flexibility in choosing the source of the first authentication and managing complex access rights through to the backend.
But you are correct: if there are not too many users to manage and they are smart enough to periodically generate a client certificate and they are physically attached to their own personal devices, then a Certificate Authority or even Open SSL solution is another option.
I guess it would be usefull to know how many users there are and how the authentication through from the NW portal to the ABAP backend system is going to replaced. Also how much user context information is needed on the backend system still, if at all anymore.
I think we need more information here still before we can safely conclude that a client certificate is appropriate for an internet scenario.
I am more worried about all those issues like stolen certificate and so on.
From my SDN experiences it is more often a case of people loosing their certificates and user IDs than one of other people stealing them.. The vaste majority of the 2 million users are using passwords and those who are active seem to be happy with the password reset service --> also an option.
Cheers,
Julius

Limited login in multiple logon blocked condition

Hello Expert
we are using ECC6.0 EHP4, we blocked multiple logon on PRD system but now want to allow multiple loggin on some ID
but apart from that we also want to resrtict no total no. of logon session by 4 only.
suppose USER1 is SAP ID on which we want to permit multiple logon with this permission we also want to restriction as only 4-5 logon session are allowed (on the same front-end system or different-different front-end system) for this SAP ID.
plz help us to get this.
best Regards
Deepak Singh

Hi Deepak,
Refer SAP Note # Note 142724 - Prevention of multiple SAPGUI logons
you can disable multiple user login acrocss SAP instance via profile parameter :login/disable_multi_gui_login =1
however , further you can add exception list via SAP profile parameter:login/multi_login_users= <userID>
as per your requirement , you further want restrictions by allowing above exception list with only 4 sessions , which you can control via SAP profile parameter : rdisp/max_alt_modes = 6
pls check if it works , but mind changing SAp profile parameter requires SAP system restart to reflect changes
Regards,

Multiple Logon in Production

All,
I am trying to understand the actual risk of allowing users multiple logon in production systems. As of now I believe that should logon credentials be stolen then it's not possible to monitor illegal logons and also a possible data inconsistency.
Please throw some light, have tried searching with the logon profile parameters in the forum and online, but nothing concrete found.
Kind Regards,
AJS

Hi Avinash,
Production system should not allow multiple logon.
Please have a look at below for restrict multiple logins :-
[Restrict multiple logins for a single user in Portal |/message/6942923#6942923 [original link is broken];
[Limiting Number of Users Logged On |http://wiki.sdn.sap.com/wiki/display/EP/LimitingNumberofUsersLogged+On]
Hope it helps
Regards

SAPGui for Windows Multiple Logon with Portal

Hi,
We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
I came across certain threads and also notes but none seem to provide a solution....
[Restrict multi logon to R/3 system from portal using single sign on. |Restrict multi logon to R/3 system from portal using sigle sign on.;
[SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it? |/thread/1623980 [original link is broken];
Note 142724 - Prevention of multiple SAPGUI logons
Thank you in advance.
Best regards,
Dharmi
Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

Lonny,
The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
Thanks,
Tim

Remote Desktop Gateway and WebAccess Deployment - Multiple Logon Prompts

I'm having a few issues with some multiple logon prompts using "Connect to a remote PC" via RD Web Access.
I am able to log onto the RDWeb without a problem.
Essentially once I make a connection to my end-device I first receive a logon prompt, I'm authenticated, then I'm asked again for another logon prompt. Any ideas how to resolve this?
My layout is simple:
1 VM in the DMZ that has the Remote Desktop Gateway and Remote Desktop Web Access roles installed. No connection broker, or session host.
With my deployment I have a wildcard certificate bound to the Remote Desktop Gateway and it is bound properly in IIS. Remote Desktop functionality through the RDGateway works just fine. However, the only nuisance is that I get prompted multiple times for
credentials when accessing the end-device regardless if my connection is from a domain-joined machine or a non-domain joined machine.
I've tried using Web Single Sign On via http://anandthearchitect.com/2014/01/20/rds-2012-r2single-sign-on-using-windows-authentication-for-rdweb-page/ and it still does not work.
Any ideas?
Thanks,
Dan

Hi Dan,
How many prompts are you seeing? Expected behavior for Connect to a remote PC would be this:
1. Log on to RDWeb
2. Select Connect to a remote PC tab
3. Enter server name in Connect to box, click Connect
4. Unknown publisher warning, click Connect
5. Credentials prompt, it should say These credentials will be used to connect to the following computers: 1. rdgw.domain.com (RD Gateway server) 2. remote.domain.com (remote computer)
6. After entering credentials and clicking OK it should log you in to the remote computer. This assumes that the destination is authenticated properly (usually via certificate) and the credentials are valid for both the RDG and the remote
computer. Normally in a domain environment the same credentials (domain\username) would be valid for the RDG and the remote server.
-TP

How to make "check for multiple logons" mandatory in webdynpro application.

Hi SDN members,
Im having a problem with an application developed in webdynpro abap.
We require that end-user only have a session per computer (ip address),
I already tried to achieve this by configuring the webdynpro application throguh SICF and going to Error Pages -> Logon Errors --> System Logon and mark the checkbox Check for multiple logons.
This configurations give only a warning when the user logs multiple times, and show a checkbox letting the user decide to end or not the previous sessions.
How to make end previuos sessions mandatory ??
Regards,
Franklin Cedillo

You would have to enforce this at the application level. You can get the IP address of the current client from the framework - IF_WD_APPLICATION method GET_REMOTE_ADDRESS.
You could write an entry with the IP address into a temporary table during WDDOINIT. You could clear the entry in the WDDOEXIT. Also during the WDDOINIT, check to see if there is already an entry for this IP address. If so, then fire an exit nagivation plug to a static MIME object or BSP page that explains why the user can only be logged in once.

Multiple logon screen doesnt appear and session end in 30mins

Hi all,
I have a problem with my login session.
Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
thanks.

Check these parameters
login/disable_multi_gui_login
Controls the deactivation of multiple dialog logons
Available as of SAP Basis 4.6
login/multi_login_users
List of excepted users, that is, the users that are permitted to log on to the system more than once.
Available as of SAP Basis 4.6
Find the full list of relevant parameters at:
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

How to block the multiple logons with NWBC?

Hello,
With Sapgui we have the possibility to prevent the multiple dialog logon by profile parameters (login/disable_multi_gui_login).
How to prevent the multiple dialog logon using NWBC to the same system?
Best regards
Frédéric Blaise
e-Kenz S.A.
Luxembourg

Hello,
I opened a ticket at Sap but unfortunately they do not have a solution even if the problem is known.
"Unfortunately, due the HTTP protocol nature, is not possible to force a single logon via web browser. The profile parameter login/disable_multi_gui_login is solely valid for SAPGUI logons."
"Since this case is known since the Web Application Server was created, I am pretty convinced that SAP knows about the fact that multiple logons cannot be blocked (you can only give a warning for the user)."
Since we monitor multiple connections with the SM04 transaction and notify customers that they may be controlled by Sap.
Best regards
Frédéric

Multiplie logon message *every* time I try to logon?

Hello,
I hope that someone can help me with this: before few weeks I had sudden failure in SAP and I was disconnected from the system and after that momment *every* time I logon I see this multiplie logon message:
http://img255.imageshack.us/img255/7163/04feb1310713pm.jpg
Why is this happening exactly and how can I solve it? I must note that *only* I use this licence and know the password and nobody else didn't for sure.
Many thanks in advance for prompt replies!
Cheers,
Sam

Hi Sam,
The old session is stuckup.You can either:
1. Goto SM04 and try to kill the session by either logging off user system wide else goto Session -> Select Session -> End session.
2. If this doesnt work , you can goto OS level and Kill the Process by kill -9 <pid> . Pls confrim with the administrators before doing this.
3.Else even if this doesnt work, you have to reboot the server. Pls be careful if it is a production system.
Pls try and let us know.
Regards,
Madhura.

How to edit "license information for multiple logon" screen

hey gurus
i need to know how to edit or modify the 'license information for multiple logon" screen. this screen usually pops up when a user tries for a multiple logon to sap. We have activated the parameter 'login/disable_multi_gui_login' but we would like to modify the screen in such a way that only one radio button which says 'terminate this logon' should exist. we would prefer to remove the option of 'continue with this option and end any other logon'. Now i searched but i could not find anything to implement this so i am here and i need your advice and suggestions.
thanks in advance.
cheers.
nate

hey bernhard
many thanks for your reply..i appreciate your help. its just that its not explicitly mentioned we cant modify the screen in the note.
Is there any other note that specifically say so?
thanks for your time buddy.
regards

Multiple Logon disable

Similar Messages

Maybe you are looking for