Multiple Logon Restriction in EP5.0 SP6

Hi,
We are using the EP5.0 with SP6. BVackend CRM System.
We have to restrict the users for single logon into the enterprise Portal.
Can any one please let us know how to achieve this Single Logon. Its Very Urgent. WE are in Testing Phase and need to Go-Live. Before that we need to solve this.
Thanks & Regrads
Sumanth

What do you mean by "restrict the users for single logon"? Any way setting up single sign is a bit involved process and hard to explain in a post. SAP's help site does an excellant job of explaining it. You can start from this URL
http://help.sap.com/saphelp_ep50sp6/helpdata/en/02/ae0d3dbd82fe2fe10000000a114084/content.htm

Similar Messages

Restricting Multiple Logons to EP

Dear Experts,
We are in Enterprise Portal 7.0 EhP1 SP07
We have a Business Requirement where in we need to restrict the users from multiple logons.
For example, if I have logged into the portal with User ID u201CUser Au201D from an IE-6 browser window,
then the same u201CUser Au201D should not be allowed to login from any other browser window. (Here, any other browser literally means that once the session is active in one browser, then no other browser window, let it be from the same machine or other machine or any Web Browser other than IE-6 should not be allowed.)
Is this possible? Can this be achieved with a Custom Login module for restricting the sessions?
Kindly help.
Regards,
Sheryas Pandya

Hi Shreyas,
There is no easy way to restrict multiple logins. But this can be done through code changes in the header jsp files. Check these links:
Prevent multiple logins of the same user in portal
How to restrict multiple login session
Thanks and Regards,
Shyam.

Multiple Logon in Production

All,
I am trying to understand the actual risk of allowing users multiple logon in production systems. As of now I believe that should logon credentials be stolen then it's not possible to monitor illegal logons and also a possible data inconsistency.
Please throw some light, have tried searching with the logon profile parameters in the forum and online, but nothing concrete found.
Kind Regards,
AJS

Hi Avinash,
Production system should not allow multiple logon.
Please have a look at below for restrict multiple logins :-
[Restrict multiple logins for a single user in Portal |/message/6942923#6942923 [original link is broken];
[Limiting Number of Users Logged On |http://wiki.sdn.sap.com/wiki/display/EP/LimitingNumberofUsersLogged+On]
Hope it helps
Regards

SAPGui for Windows Multiple Logon with Portal

Hi,
We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
I came across certain threads and also notes but none seem to provide a solution....
[Restrict multi logon to R/3 system from portal using single sign on. |Restrict multi logon to R/3 system from portal using sigle sign on.;
[SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it? |/thread/1623980 [original link is broken];
Note 142724 - Prevention of multiple SAPGUI logons
Thank you in advance.
Best regards,
Dharmi
Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

Lonny,
The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
Thanks,
Tim

Multiple logons in R/3

Hi,
I have many roles with transactions iviews. User has tendancy to open portal in new window/tab for accessing multiple tranactions at the same time. Opening portal in new window/tab creates new logon in R/3.
Can we change configuration so that opening more portal sessions in new tabs/new windows will be registered as multiple sessions in R/3 and not multiple logons?
Thanks,
Apurva

Hi
Please Check these threads
1.[Multiple Logon|Multiple Logon;
2.[Restricting the multiple logons in portal|Restricting the multiple logons in portal;
3.[how to prevent multiple logon|how to prevent multiple logon;
Hope it help you.
Best Regards
Satish Kumar

Cannot disable multiple logon

Dear all,
I want to disable multiple logon in my system, I have add parameter: login/disable_multi_gui_login value as 1. But it can't disable multiple logon after restart sap. Could you advice?
Rdgs,
Emily

Hello Emily
1. Try setting the parameter in default profile (DEFAULT.PFL).
2. The parameter restricts multiple logon throguh sap gui only. I hope you are testing multiple logons through sap gui.
Cheers,
Tapan

Limited login in multiple logon blocked condition

Hello Expert
we are using ECC6.0 EHP4, we blocked multiple logon on PRD system but now want to allow multiple loggin on some ID
but apart from that we also want to resrtict no total no. of logon session by 4 only.
suppose USER1 is SAP ID on which we want to permit multiple logon with this permission we also want to restriction as only 4-5 logon session are allowed (on the same front-end system or different-different front-end system) for this SAP ID.
plz help us to get this.
best Regards
Deepak Singh

Hi Deepak,
Refer SAP Note # Note 142724 - Prevention of multiple SAPGUI logons
you can disable multiple user login acrocss SAP instance via profile parameter :login/disable_multi_gui_login =1
however , further you can add exception list via SAP profile parameter:login/multi_login_users= <userID>
as per your requirement , you further want restrictions by allowing above exception list with only 4 sessions , which you can control via SAP profile parameter : rdisp/max_alt_modes = 6
pls check if it works , but mind changing SAp profile parameter requires SAP system restart to reflect changes
Regards,

Remote Desktop Gateway and WebAccess Deployment - Multiple Logon Prompts

I'm having a few issues with some multiple logon prompts using "Connect to a remote PC" via RD Web Access.
I am able to log onto the RDWeb without a problem.
Essentially once I make a connection to my end-device I first receive a logon prompt, I'm authenticated, then I'm asked again for another logon prompt. Any ideas how to resolve this?
My layout is simple:
1 VM in the DMZ that has the Remote Desktop Gateway and Remote Desktop Web Access roles installed. No connection broker, or session host.
With my deployment I have a wildcard certificate bound to the Remote Desktop Gateway and it is bound properly in IIS. Remote Desktop functionality through the RDGateway works just fine. However, the only nuisance is that I get prompted multiple times for
credentials when accessing the end-device regardless if my connection is from a domain-joined machine or a non-domain joined machine.
I've tried using Web Single Sign On via http://anandthearchitect.com/2014/01/20/rds-2012-r2single-sign-on-using-windows-authentication-for-rdweb-page/ and it still does not work.
Any ideas?
Thanks,
Dan

Hi Dan,
How many prompts are you seeing? Expected behavior for Connect to a remote PC would be this:
1. Log on to RDWeb
2. Select Connect to a remote PC tab
3. Enter server name in Connect to box, click Connect
4. Unknown publisher warning, click Connect
5. Credentials prompt, it should say These credentials will be used to connect to the following computers: 1. rdgw.domain.com (RD Gateway server) 2. remote.domain.com (remote computer)
6. After entering credentials and clicking OK it should log you in to the remote computer. This assumes that the destination is authenticated properly (usually via certificate) and the credentials are valid for both the RDG and the remote
computer. Normally in a domain environment the same credentials (domain\username) would be valid for the RDG and the remote server.
-TP

How to make "check for multiple logons" mandatory in webdynpro application.

Hi SDN members,
Im having a problem with an application developed in webdynpro abap.
We require that end-user only have a session per computer (ip address),
I already tried to achieve this by configuring the webdynpro application throguh SICF and going to Error Pages -> Logon Errors --> System Logon and mark the checkbox Check for multiple logons.
This configurations give only a warning when the user logs multiple times, and show a checkbox letting the user decide to end or not the previous sessions.
How to make end previuos sessions mandatory ??
Regards,
Franklin Cedillo

You would have to enforce this at the application level. You can get the IP address of the current client from the framework - IF_WD_APPLICATION method GET_REMOTE_ADDRESS.
You could write an entry with the IP address into a temporary table during WDDOINIT. You could clear the entry in the WDDOEXIT. Also during the WDDOINIT, check to see if there is already an entry for this IP address. If so, then fire an exit nagivation plug to a static MIME object or BSP page that explains why the user can only be logged in once.

Multiple logon screen doesnt appear and session end in 30mins

Hi all,
I have a problem with my login session.
Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
thanks.

Check these parameters
login/disable_multi_gui_login
Controls the deactivation of multiple dialog logons
Available as of SAP Basis 4.6
login/multi_login_users
List of excepted users, that is, the users that are permitted to log on to the system more than once.
Available as of SAP Basis 4.6
Find the full list of relevant parameters at:
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

Multiple Logon disable

Dear All ,
while multiple logon are performed.SAP pop-up a message with 3 options
1.terminate logon
2.continue with the logon
3.continue with the logon terminating other sessions.
Here we Want to disable the 2 option that is : continue with the logon.
Here we came to know : we can add the following parameterto the instance profile
logon/disable_multi_gui_login
Pl guide with the steps how to add this & where ( Tcode & procedure ) .
Regards

Hi,
Please go through the below SAPnote to get better clarity on it.....
Note 142724 - Prevention of multiple SAPGUI logons
PS: If this parameter is set to value 1, multiple SAPGUI logons (in the same client and with the same user) are blocked by the system. The parameter is effective during the SAPGUI logon. Logons to the system using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not influenced by the profile parameter. Furthermore, SAPGUI transaction calls (iViews) that are placed through the Workplace or the Enterprise Portal are not controlled with regard to multiple logons...
Regards,
PY

How to block the multiple logons with NWBC?

Hello,
With Sapgui we have the possibility to prevent the multiple dialog logon by profile parameters (login/disable_multi_gui_login).
How to prevent the multiple dialog logon using NWBC to the same system?
Best regards
Frédéric Blaise
e-Kenz S.A.
Luxembourg

Hello,
I opened a ticket at Sap but unfortunately they do not have a solution even if the problem is known.
"Unfortunately, due the HTTP protocol nature, is not possible to force a single logon via web browser. The profile parameter login/disable_multi_gui_login is solely valid for SAPGUI logons."
"Since this case is known since the Web Application Server was created, I am pretty convinced that SAP knows about the fact that multiple logons cannot be blocked (you can only give a warning for the user)."
Since we monitor multiple connections with the SM04 transaction and notify customers that they may be controlled by Sap.
Best regards
Frédéric

Multiplie logon message *every* time I try to logon?

Hello,
I hope that someone can help me with this: before few weeks I had sudden failure in SAP and I was disconnected from the system and after that momment *every* time I logon I see this multiplie logon message:
http://img255.imageshack.us/img255/7163/04feb1310713pm.jpg
Why is this happening exactly and how can I solve it? I must note that *only* I use this licence and know the password and nobody else didn't for sure.
Many thanks in advance for prompt replies!
Cheers,
Sam

Hi Sam,
The old session is stuckup.You can either:
1. Goto SM04 and try to kill the session by either logging off user system wide else goto Session -> Select Session -> End session.
2. If this doesnt work , you can goto OS level and Kill the Process by kill -9 <pid> . Pls confrim with the administrators before doing this.
3.Else even if this doesnt work, you have to reboot the server. Pls be careful if it is a production system.
Pls try and let us know.
Regards,
Madhura.

How to edit "license information for multiple logon" screen

hey gurus
i need to know how to edit or modify the 'license information for multiple logon" screen. this screen usually pops up when a user tries for a multiple logon to sap. We have activated the parameter 'login/disable_multi_gui_login' but we would like to modify the screen in such a way that only one radio button which says 'terminate this logon' should exist. we would prefer to remove the option of 'continue with this option and end any other logon'. Now i searched but i could not find anything to implement this so i am here and i need your advice and suggestions.
thanks in advance.
cheers.
nate

hey bernhard
many thanks for your reply..i appreciate your help. its just that its not explicitly mentioned we cant modify the screen in the note.
Is there any other note that specifically say so?
thanks for your time buddy.
regards

Multiple Logon Restriction in EP5.0 SP6

Similar Messages

Maybe you are looking for