Restricting Multiple Logons to EP

Dear Experts,
We are in Enterprise Portal 7.0 EhP1 SP07
We have a Business Requirement where in we need to restrict the users from multiple logons.
For example, if I have logged into the portal with User ID u201CUser Au201D from an IE-6 browser window,
then the same u201CUser Au201D should not be allowed to login from any other browser window. (Here, any other browser literally means that once the session is active in one browser, then no other browser window, let it be from the same machine or other machine or any Web Browser other than IE-6 should not be allowed.)
Is this possible? Can this be achieved with a Custom Login module for restricting the sessions?
Kindly help.
Regards,
Sheryas Pandya

Hi Shreyas,
There is no easy way to restrict multiple logins. But this can be done through code changes in the header jsp files. Check these links:
Prevent multiple logins of the same user in portal
How to restrict multiple login session
Thanks and Regards,
Shyam.

Similar Messages

SAPGui for Windows Multiple Logon with Portal

Hi,
We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
I came across certain threads and also notes but none seem to provide a solution....
[Restrict multi logon to R/3 system from portal using single sign on. |Restrict multi logon to R/3 system from portal using sigle sign on.;
[SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it? |/thread/1623980 [original link is broken];
Note 142724 - Prevention of multiple SAPGUI logons
Thank you in advance.
Best regards,
Dharmi
Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

Lonny,
The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
Thanks,
Tim

Cannot disable multiple logon

Dear all,
I want to disable multiple logon in my system, I have add parameter: login/disable_multi_gui_login value as 1. But it can't disable multiple logon after restart sap. Could you advice?
Rdgs,
Emily

Hello Emily
1. Try setting the parameter in default profile (DEFAULT.PFL).
2. The parameter restricts multiple logon throguh sap gui only. I hope you are testing multiple logons through sap gui.
Cheers,
Tapan

Multiple Logon in Production

All,
I am trying to understand the actual risk of allowing users multiple logon in production systems. As of now I believe that should logon credentials be stolen then it's not possible to monitor illegal logons and also a possible data inconsistency.
Please throw some light, have tried searching with the logon profile parameters in the forum and online, but nothing concrete found.
Kind Regards,
AJS

Hi Avinash,
Production system should not allow multiple logon.
Please have a look at below for restrict multiple logins :-
[Restrict multiple logins for a single user in Portal |/message/6942923#6942923 [original link is broken];
[Limiting Number of Users Logged On |http://wiki.sdn.sap.com/wiki/display/EP/LimitingNumberofUsersLogged+On]
Hope it helps
Regards

Multiple logons in R/3

Hi,
I have many roles with transactions iviews. User has tendancy to open portal in new window/tab for accessing multiple tranactions at the same time. Opening portal in new window/tab creates new logon in R/3.
Can we change configuration so that opening more portal sessions in new tabs/new windows will be registered as multiple sessions in R/3 and not multiple logons?
Thanks,
Apurva

Hi
Please Check these threads
1.[Multiple Logon|Multiple Logon;
2.[Restricting the multiple logons in portal|Restricting the multiple logons in portal;
3.[how to prevent multiple logon|how to prevent multiple logon;
Hope it help you.
Best Regards
Satish Kumar

Limited login in multiple logon blocked condition

Hello Expert
we are using ECC6.0 EHP4, we blocked multiple logon on PRD system but now want to allow multiple loggin on some ID
but apart from that we also want to resrtict no total no. of logon session by 4 only.
suppose USER1 is SAP ID on which we want to permit multiple logon with this permission we also want to restriction as only 4-5 logon session are allowed (on the same front-end system or different-different front-end system) for this SAP ID.
plz help us to get this.
best Regards
Deepak Singh

Hi Deepak,
Refer SAP Note # Note 142724 - Prevention of multiple SAPGUI logons
you can disable multiple user login acrocss SAP instance via profile parameter :login/disable_multi_gui_login =1
however , further you can add exception list via SAP profile parameter:login/multi_login_users= <userID>
as per your requirement , you further want restrictions by allowing above exception list with only 4 sessions , which you can control via SAP profile parameter : rdisp/max_alt_modes = 6
pls check if it works , but mind changing SAp profile parameter requires SAP system restart to reflect changes
Regards,

Restricting Multiple log ons in portal

Hi all,
We want to restrict mulitple logon s in portal.
Onc a user is logged in,all subsequent user logon s for that user should prompt " The user is already logged in"
Are there any standard configurations which can provide this behaviour.
Or , should we write a custom module to acheive the same.
ANy API s to check if a user is logged in already or not...
Any help woulb be greatly appreciated.
Thanks and Regards
Bharathwaj

Hi Bharathwaj,
see:
MULTIPLE LOGIN WITH SAME USER ID
and
Only one authenticated user at time in Enterprise Portals
Hope it helps
Detlev

Restrict multiple log in with same user ID

I have a JSF Project where I use Oracle JAAS for Login.
The login works perfectly and also the components on the JSF page shows as per User Role. I am using OAS 10.1.3.3.
I want to now implement the code so as to restrict simultaneous logins with the same user id. That is a user id cannot be looged in at once to the server from more than one machine.
The login.html is:
<form name="loginFrm" method="post" action="j_security_check">
      <p>Log in to access restricted zone.</p>
      <table>
       <tr>
        <td>User name</td>
        <td>
         <input id="j_username" type="text" name="j_username"/>
        </td>
       </tr>
       <tr>
        <td>Password</td>
        <td>
         <input type="password" name="j_password"/>
        </td>
       </tr>
       <tr>
        <td> </td>
        <td>
         <input type="submit" value="Login" onclick="document.body.style.cursor='wait';"/>
        </td>
       </tr>
      </table>
     </form>The securityconfig int he web.xml file is:
<login-config>
      <auth-method>FORM</auth-method>
      <realm-name>jazn.com</realm-name>
      <form-login-config>
         <form-login-page>/login.html</form-login-page>
         <form-error-page>/loginError.html</form-error-page>
      </form-login-config>
    </login-config>
    <security-role>
      <role-name>ADMINISTRATOR</role-name>
    </security-role>
    <security-role>
      <role-name>MANAGER</role-name>
    </security-role>
    <security-role>
      <role-name>INSURER</role-name>
    </security-role>
    <security-role>
      <role-name>TRACKER</role-name>
    </security-role>
    <security-role>
      <role-name>INSURER_MANAGER</role-name>
    </security-role>

Then I would say it is not possible: Restrict multiple login in SAP Business Objects 4.0 SP6 for single user
multiple login disable in BO | SCN

How to restrict multiple ess session and access?

Hi experts,
how to restrict multiple session for ess user? and multi access for same ess user?
our problem is when user login to ess (doing session, for example leave request) and at the same time their manager is accessing travel approval task for that user, the approval process getting error. (we use travel workflow to approve travel request)
how to overcome this situation?
thanks.

but there is no information on ESS screen for user being lock.
how to show the information on ess screen?
thanks

Remote Desktop Gateway and WebAccess Deployment - Multiple Logon Prompts

I'm having a few issues with some multiple logon prompts using "Connect to a remote PC" via RD Web Access.
I am able to log onto the RDWeb without a problem.
Essentially once I make a connection to my end-device I first receive a logon prompt, I'm authenticated, then I'm asked again for another logon prompt. Any ideas how to resolve this?
My layout is simple:
1 VM in the DMZ that has the Remote Desktop Gateway and Remote Desktop Web Access roles installed. No connection broker, or session host.
With my deployment I have a wildcard certificate bound to the Remote Desktop Gateway and it is bound properly in IIS. Remote Desktop functionality through the RDGateway works just fine. However, the only nuisance is that I get prompted multiple times for
credentials when accessing the end-device regardless if my connection is from a domain-joined machine or a non-domain joined machine.
I've tried using Web Single Sign On via http://anandthearchitect.com/2014/01/20/rds-2012-r2single-sign-on-using-windows-authentication-for-rdweb-page/ and it still does not work.
Any ideas?
Thanks,
Dan

Hi Dan,
How many prompts are you seeing? Expected behavior for Connect to a remote PC would be this:
1. Log on to RDWeb
2. Select Connect to a remote PC tab
3. Enter server name in Connect to box, click Connect
4. Unknown publisher warning, click Connect
5. Credentials prompt, it should say These credentials will be used to connect to the following computers: 1. rdgw.domain.com (RD Gateway server) 2. remote.domain.com (remote computer)
6. After entering credentials and clicking OK it should log you in to the remote computer. This assumes that the destination is authenticated properly (usually via certificate) and the credentials are valid for both the RDG and the remote
computer. Normally in a domain environment the same credentials (domain\username) would be valid for the RDG and the remote server.
-TP

Restrict multiple Proforma invoice from order

Hello All,
Our customer wants to restrict multiple proforma invoice from sales order.I have written a logic in copy requirement routine.Its working when there is already created invoice from order .But if i try to create invoice first time from order then system doesn't allow me to create invoice and giving message "No billing document were generated ".
Could anybody help.
Regards,
Sachin

Hi,
Restrict multiple Proforma invoices
Thanks & regards.

How to make "check for multiple logons" mandatory in webdynpro application.

Hi SDN members,
Im having a problem with an application developed in webdynpro abap.
We require that end-user only have a session per computer (ip address),
I already tried to achieve this by configuring the webdynpro application throguh SICF and going to Error Pages -> Logon Errors --> System Logon and mark the checkbox Check for multiple logons.
This configurations give only a warning when the user logs multiple times, and show a checkbox letting the user decide to end or not the previous sessions.
How to make end previuos sessions mandatory ??
Regards,
Franklin Cedillo

You would have to enforce this at the application level. You can get the IP address of the current client from the framework - IF_WD_APPLICATION method GET_REMOTE_ADDRESS.
You could write an entry with the IP address into a temporary table during WDDOINIT. You could clear the entry in the WDDOEXIT. Also during the WDDOINIT, check to see if there is already an entry for this IP address. If so, then fire an exit nagivation plug to a static MIME object or BSP page that explains why the user can only be logged in once.

Multiple logon screen doesnt appear and session end in 30mins

Hi all,
I have a problem with my login session.
Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
thanks.

Check these parameters
login/disable_multi_gui_login
Controls the deactivation of multiple dialog logons
Available as of SAP Basis 4.6
login/multi_login_users
List of excepted users, that is, the users that are permitted to log on to the system more than once.
Available as of SAP Basis 4.6
Find the full list of relevant parameters at:
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

Multiple Logon disable

Dear All ,
while multiple logon are performed.SAP pop-up a message with 3 options
1.terminate logon
2.continue with the logon
3.continue with the logon terminating other sessions.
Here we Want to disable the 2 option that is : continue with the logon.
Here we came to know : we can add the following parameterto the instance profile
logon/disable_multi_gui_login
Pl guide with the steps how to add this & where ( Tcode & procedure ) .
Regards

Hi,
Please go through the below SAPnote to get better clarity on it.....
Note 142724 - Prevention of multiple SAPGUI logons
PS: If this parameter is set to value 1, multiple SAPGUI logons (in the same client and with the same user) are blocked by the system. The parameter is effective during the SAPGUI logon. Logons to the system using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not influenced by the profile parameter. Furthermore, SAPGUI transaction calls (iViews) that are placed through the Workplace or the Enterprise Portal are not controlled with regard to multiple logons...
Regards,
PY

Restricting Multiple Logons to EP

Similar Messages

Maybe you are looking for