Knowledge area
Authentication and communication
Passwords, encryption, SSO, trust relationships and RFC Gateway.
SESS · Authentication and communication
Web session protection
Protect session cookies from script access and transmission without HTTPS.
Standard
Configuration and review ↗
NETENC · Authentication and communication
SNC, TLS and internal communication
Authenticate and encrypt communication across untrusted networks.
StandardCriticalExtended
Configuration and review ↗
PWDPOL · Authentication and communication
Password policies
Establish a consistent password policy for ABAP, Java and HANA.
CriticalStandardExtended
Configuration and review ↗
RFCGW · Authentication and communication
Gateway registration, startup and proxy
Restrict connections to external RFC servers and disable simulation after rollout.
CriticalExtended
Configuration and review ↗
TRUST · Authentication and communication
Trust between systems
Maintain only required trust relationships and control their use.
CriticalStandardExtended
Configuration and review ↗
SSO · Authentication and communication
SSO ticket and cookie protection
Restrict how logon tickets are transmitted and used.
StandardExtended
Configuration and review ↗