SAP NetWeaver Security Articles

Provisioining Framework for SAP Systems: Connectivity Article(PDF 392 KB)This document provides information about how to install and use the provisioning framework for SAP systems with SAP NetWeaver Identity Management.23 Oct 2007

Provisioning Framework for SAP Systems: Use Cases Article(PDF 317 KB)

This document provides an overview of the identity management use cases supported by the provisioning framework for SAP systems. These include identity management provisioning from an SAP HCM system, provisioning in an SAP Enterprise Portal environment, and a complete identity management lifecycle use case.23 Oct 2007

SAP and Citrix: Deployment Best Practices, Delivering Performance, Security, Availability, and Cost Benefits Enterprise Wide Article(PDF 552 KB)

Citrix and SAP collaborated in a test lab organized through the Enterprise Services Community to produce a blueprint on how to use Citrix products for the benefit of enterprise SOA-based SAP solutions. This paper shows the results.24 Sep 2007

Transform the Internet into a Business-Ready Application Delivery Platform for Enterprise SOA based SAP Deployments Article(PDF 507 KB)

Learn how the Internet can impact the performance of web-enabled application response times to end users and how Akamai’s Internet overlay network can address the quality uncertainties of the Internet.01 Sep 2007

SAP NetWeaver Authorization Troubleshooting Article(PDF 218 KB)

This paper is to introduce the reader into troubleshooting Authorization issues using standard SAP Transactions to analyze, identify and rectify authorization failures.07 Aug 2007

Testing Secure Enterprise SOA Applications Across Wide Area Networks Without Leaving the Lab Article(PDF 2 MB)

HP’s LoadRunner and Shunra’s Virtual Enterprise (VE) are ideal tools to test enterprise SOA based business solutions in a real production-like setting. LoadRunner is a well-known tool for simulating end-user activities and Shunra VE is a Wide Area Network emulator which brings the Internet or any long distance Intranet into a lab environment. Test Methodologies and hands-on test examples for both applications are shown in this paper. Learn what impact the network can have on applications in this article.01 Jul 2007

SAP NetWeaver Identity Management 7.0 Whitepaper Article(PDF 707 KB)

This whitepaper describes the SAP NetWeaver Identity Management products, which cover most of the core functionality for implementing an identity management solution, including a virtual directory.01 Jul 2007

SAP NetWeaver Identity Management: Identity Center Whitepaper Article(PDF 903 KB)

This document explains the features included in SAP NetWeaver Identity Center, which is a suite of products that helps organizations handle the complex requirements of identity management.01 Jul 2007

SAP NetWeaver Identity Management: Overview Article(PDF 185 KB)

Identity management issues plague end users, IT and business today. How much are they costing you and how can you address these problems with SAP NetWeaver Identity Management? This solution overview will help you to understand these and other identity management (IdM) issues facing a typical enterprise, and how to address them. It also explains the new opportunity that IdM creates for integrating business processes, and how SAP NetWeaver Identity Management can help you to integrate systems in a heterogeneous IT environment.01 Jul 2007

SAP NetWeaver Identity Management: Virtual Directory Server Whitepaper Article(PDF 1013 KB)

This whitepaper explains about the concepts and features of the Virtual Directory Server.01 Jul 2007

SAP GRC Access Control: Configuring Requestor Landing Page for Compliant User Provisioning (formerly Virsa Access Enforcer) Article(PDF 220 KB)

The purpose of this article is to provide the procedure required to customize the requestor landing page i.e. the request types on the request access screen in compliant user provisioning in SAP GRC Access Control12 Jun 2007

SAP GRC Access Control – Configuring Compliant User Provisioning (formerly Virsa Access Enforcer) into CUA Systems Article(PDF 457 KB)

For GRC Access Control to be able to perform user provisioning into Central User Administation (CUA) systems certain special configurations related to compliant user provisioning (formerly Virsa Access Enforcer) need to be done. This article outlines the configuration procedure for provisioning to work with CUA systems. The paper also discusses troubleshooting.25 May 2007

SAP GRC Access Control 5.2 Pre-Implementation Guide Article(PDF 1 MB)

This guide provides guidelines and best practices for the pre-implementation of the SAP GRC Access Control. Pre-implementation is the process of understanding customer requirements. It helps to lay a firm groundwork for successful implementation of the application. The guide outlines the different steps of the process and describes some of the factors that influence performance and hardware requirements.01 May 2007

Single Sign-On to Microsoft Exchange 2007 in a Clustered Environment Article(PDF 643 KB)

Users of the SAP NetWeaver Portal can take advantage of Single Sign-On to Web based Microsoft backend systems such as Outlook Web Access using SAP’s SSO22KerbMap Module. In Exchange 2007, Client Access servers support Integrated Windows Authentication for Exchange 2007 virtual directories. As a result the SSO22KerbMap Module can now be installed on a Client Access server rather than on a backend server as with Exchange 2003 environment. Exchange 2007 now also offers the possibility to cluster mailboxes, a feature that will likely find a large adoption. We thus investigated a setup that consists out of a Client Access Server and CCR cluster (Cluster Continuous Replication).01 May 2007

SAP Security Newsletter May 2007 Article(PDF 34 KB)

SAP Security Newsletter May 200701 May 2007

SAP Security Newsletter April 2007 Article(PDF 30 KB)

SAP Security Newsletter April 200725 Apr 2007

GRC Access Control – Alert Notification Article(PDF 69 KB)

GRC Access Control: How-to guide on troubleshooting alert notifications23 Apr 2007

GRC Access Control – Risk Terminator Configuration Article(PDF 433 KB)

GRC Access Control – risk analysis and remediation: How-to guide on setting up risk terminator23 Apr 2007

GRC Access Control – Table Change Log Details Article(PDF 87 KB)

GRC Access Control: How-to guide on managing table change logs23 Apr 2007

Guard Your Web Applications Against XSS Attacks Article(PDF 167 KB)

Within SAP NetWeaver, SAP provides different solutions to help applications protect against cross-site scriptin (XSS) attacks. These solutions vary depending on what user interface technology handles the data. This SAP Insider article provides a full explanation.09 Apr 2007