Skip to Content

KeePass and SAP-Logon

Some of you may know this: x systems, y clients and many more passwords you have to keep in mind. Furthermore there are more and more complex password rules, and remembering all these passwords seems to be impossible without any help.

Single-Sign-On is not available  and not planned in your company, so what do you do? I found a nice solution for this problem: KeePass

How does it work?

Some of you may already know KeePass. You may also noticed that you can enter a “URL” in every single entry:

One may have a look at note 103019 to see you can open a connection to your SAP systems with parameters. I use this command to connect to my SAP systems:

cmd://sapshcut –maxgui -system=SID -client=100 -user={USERNAME} -pw={PASSWORD}

The parameters -system and –client need to be configured once per system. The username and password are taken from your KeePass-Database. Save your settings and press CTRL+U to directly jump into your system. Great, isn’t it?

I hope I could at least help some people to handle their passwords a little easier now.

Kind regards


You must be Logged on to comment or reply to a post.
  • Nice blogs both of you. Been using this for years now and can't live without Keepass. Although I did one thing differently, I defined an URL scheme override, sapgui and linked that to the sapshcut.exe, therefore no need to add it to the path variable and simple to move between machines as well, for instance the change in path when going from 32 to 64 bit, only need to update the URL Scheme override definition.

    • Hi Einar,

      thank you for your fee back. As you can see, we are also calling sapshcut.exe. Using a url scheme for the path is an nice idea. Could you please post an example of how you did it? It's more easy for the reader to implement it.

      Thanks in advance,


  • You can also open a ssh session by launching Putty from Keepass with your credentials saved in Keepass.

    putty and keepass

    • Open keepass and create a new entry. In the title, put your server domain or ip.
    • make sure putty is in your Windows PATH so it can be launch from the command line. (if not you should be able to put the absolute path to putty in the command line above)
    • put the other credentials informations on your new Keepass entry
    • In the URL field, put this :

    cmd://putty -load "Default Settings" {TITLE} -l {USERNAME} -pw {PASSWORD}

    • click Ok to save.
    • Then, you can open your ssh session by pressing Ctrl+U or by right clicking on your new entry and by cliking on URL(s) > Open

    NOTE :
    You can see that we are loading the “Default Settings”. You can change the default settings from Putty. You can also load other settings by changing the name in the given command line.

    putty and keepass
  • hi Jann,

    thx for the post! I used keepass successfully since a long time under SAPGUI 7.30.

    Now with 7.40 it seems that Ctrl+U (or double-click on cmd://sapshcut...) does it's job only for system-connections from the central SAPUILandscape.xml and does not work for the local one.

    Do you experience the same issues?

    Being on SAPGUI 7.40 PL2 Hotfix 2.

    Any hints appreciated.



    • Hello Christian,

      I’m living the same issue on SAP Gui 7.4 patch level 1 with configuration on XML file

      It was working on the same Gui but with saplogon.ini

      Now, I have to switch to XML

      Do you have any update on this topic?

      Thank you

        • Hi Peter,

          I'm using the keepass 2.3 with the following settings

          example of an entry :

          cmd://sapshcut  -maxgui -system=PM1 -client=020 -user={USERNAME} -pw={PASSWORD}

          the SID is already visible on my SAP Gui (740 Patch 1)


          SAP Gui Config File location :

          Local Config File.png

          Error message show


          Thank you


          • Hello Peter,

            I found a solution by adding a the new parameter -sysname="SAP SYS NAME"as set on sapshcut  help and it's working fine

            Thank you


          • Hi,

            If the problem is not solved yet i have used the following command URL for 7.40 and works:
            cmd://"C:\Program Files (x86)\SAP\FrontEnd\SAPgui\SAPgui.exe" /SHORTCUT="-gui -system=XXX -client=YYY -user={USERNAME} -pw={PASSWORD} -maxgui"



  • Hi,

    how can I use the SAP logon Keepass, when I am using Connection Type: Group/Server Selection?

    The solution above doesn't work.


    In my case, I want to start automatically the S4H [S4HANA]