Banner
Banner

Attention: open in a new window. PDFPrintE-mail

2007
06
Nov

SAP R/3 Security

Simple changes can rise your system security. Usage of SAProuter is a good choice when correctly implemented. Login through SAP LogonPad (from version 3.0f onwards) improve the access control. SAP profile parameters shall also contain:

  • Rdisp/gui_auto_logout = 1800

  • The user connection is closed after 30 minutes without usage.
  • Login/fails_to_session_end = 3

  • After 3 wrong password the connection is automaticly closed.
  • Login/fails_to_users_lock = 5

  • After 5 wrong password the user is locked.
  • Login/min_password_lng = 6

  • Password length at least 6 characters.
  • Login/password_expiration_time = 90

  • Password expires after 3 months.
Note:  I do not have to waste my time telling you to change all default passwords.
  Make sure to have the master user SAP* in all clients otherwise anyone can log into your system.
Last Updated (Tuesday, 30 November 1999 00:00)
Banner