Find the right
answer.
Search by parameter, transaction, authorization object or control identifier.
Results
42 topicsNo matching topics found
Shorten your search or clear the filters. Try a parameter name such as SNC or S_RFC.
Production and transport protection
Lock down production changes and retain a configuration change trail.
Information disclosure protection
Suppress unnecessary system details and protect administrative interfaces.
File and path access
Control access from ABAP programs to the file system.
Message Server
Separate internal communication from client access and protect administration.
Service exposure and network configuration
Restrict unnecessary services, remote calls and access to internal communication.
Test functionality in production
Remove development and testing capabilities from routine operational access.
Obsolete clients and tenants
Keep only the clients and tenants required for active environments.
SAP GUI Scripting
Enable interface automation only for justified business use.
Web session protection
Protect session cookies from script access and transmission without HTTPS.
Sensitive data in HANA traces
Restrict tracing to avoid recording query results during normal operations.
Execution controls and system accounts
Maintain control over operations and operating system account privileges.
Security updates
Maintain an update cycle and timely handling of SAP Security Notes.
Beta features in BTP
Restrict experimental features in production subaccounts.
Java user self-registration
Create accounts through a controlled process.
Standard SAP accounts
Protect built-in accounts and remove unnecessary access.
User types and identity origin
Separate personal, technical and reference users and control their identity source.
ABAP user names
Prevent unusual whitespace in user names.
SNC, TLS and internal communication
Authenticate and encrypt communication across untrusted networks.
Password policies
Establish a consistent password policy for ABAP, Java and HANA.
Gateway registration, startup and proxy
Restrict connections to external RFC servers and disable simulation after rollout.
Trust between systems
Maintain only required trust relationships and control their use.
SSO ticket and cookie protection
Restrict how logon tickets are transmitted and used.
Identity providers in BTP
Manage authentication through your organization’s identity provider.
Critical authorizations
Restrict privileges that can change data, code, identities and configuration.
Role assignments and transports
Separate the transport of role definitions from granting access to individuals.
Secure Store and keys
Protect secrets stored by the platform.
Security Audit Log and platform auditing
Record events needed for incident detection and retrospective analysis.
Custom code security
Embed security throughout the extension lifecycle.
RFC destinations
Organize SM59 connections and reduce privilege escalation risk.
Trusted RFC
Control the direction of trust and the ability to log on as another user.
Encryption and SNC
Protect partner identities, data integrity and connection confidentiality.
S_RFC and role maintenance
Replace broad privileges with roles based on actual RFC execution.
UCON: reducing remote exposure
Expose only the RFC modules required by business processes.
SACF: switchable authorization checks
Introduce additional checks after assessing their impact on users.
RFC client-side controls
Restrict who can use destinations containing stored credentials.
RFC callback
Control return calls executed with the initiating user’s privileges.
RFC Gateway and ACLs
Separate registration, startup, proxy and network access controls.
RFC security monitoring
Detect configuration drift across the integration landscape.
Secure by Default after installation and upgrade
Compare system configuration with recommended values and plan how to resolve deviations.
Hardening in ECS and RISE
Connect configuration standards with operational responsibility for the system.
Monitoring, detection and incident analysis
Connect operational logs, configuration validation and incident response.
Baseline implementation and risk management
Turn the control catalog into an organizational standard with owners and a repeatable review process.