Hi,

After GUI 740, it is not possible to have password field enabled in SAP shortcut so passwords cannot be saved. The reg values doesn’t create if you run “sapshcut.exe -register”. I also tried inserting “EnablePassword” string value manually in registry, but no luck.
So after little research I came with this another approach of automatic SAP login using batch files. But please be aware that login information is stored in a BAT file which is not encrypted and can be used to gain unauthorized access.


In my case, I have 3 clients for one SAP system,  one client is for development and 2 for Unit testing. Because of this such landscape, I could not use GuiXT effectively so I found this way of using batch file much better for such scenarios.

Steps

1. Create a folder where you want to store all login files (batch file).
2. In that folder, create a text file and put this code into it

start sapshcut -sysname=xxx -client=xxx -user=xxxxxx -pw=xxxxxxxx

sysname = system ID in logon pad
pw = password

(more info on parameters can be found on run –> sapshcut.exe /? )

3. Once done, save this file and change file name to <SYSID_CLIENT>.BAT and change save as type to ‘all files(*)’.

4. We are done !!!.. just double click on the batch file and no need to remember any system details from now on 🙂

Regards
Dharmesh

To report this post you need to login first.

10 Comments

You must be Logged on to comment or reply to a post.

    1. Dharmesh Kumar Post author

      Hi Matt,

      The blog you mentioned is about the standard SAP functionality of logging into SAP system directly using shortcut. I found it the best way of automatic logging before 740 final release.
      By default, the password field in shortcut use to be disabled by SAP which needs to be enabled to allow password input using “sapshcut.exe -register” which inserts required registery values.

      After 740 release, it is not allowed to enter password in shortcuts at all (even if you insert these keys manually). In my case we have 20 SAP systems and most of them have 2-3 clients. It becomes very hard to remember all these passwords and if entered incorrectly, it takes 2-3 hours to get it unlocked, So my method is simply to create .bat file, call sapshcut.exe and provide password at runtime.

      I do understand that it is not the best idea as saving passwords in plain batch file is of security concern. But as my PC is not shared and I can save the files locally, there is no way it can be misused. Depending on scenarios, you can take extra measures to protect your batch files.

      Regards
      Dharmesh

      (0) 
      1. Matt Fraser

        The blog is specifically addressing how to save passwords in shortcuts using SAPGUI 7.40 after patch 1, and as talked about in Note 146173. Yes, it’s still not recommended, but at least in this circumstance the password is not saved in cleartext. I would think that this would meet your requirement. As a system administrator of numerous systems myself, I certainly understand the frustration of trying to remember lots of different passwords.
         

        (0) 
  1. Sujoy Sameer Das

    Hi Dharmesh,

    Thanks for this blog, looks interesting.

    I can suggest you one more idea.

    Please use KeePass Tool(you can download from Google) , Easy to use,  It keeps your password

    safe and secured. Just Click and your SAP system will be login automatically.

    Regards,
    Sujoy

    (2) 
    1. Dharmesh Kumar Post author

      Hi Sujoy,
      Thanks for the suggestion. Unfortunately, we do not have authority to install softwares but creating batch files is open for all 😉

      Regards
      Dharmesh 

      (0) 
      1. Mathew SANDERSON

        Hello Dharmesh,

        Use the portable version of KeePass and you do not have to install the software.

        If you can connect a USB flash drive, then simply put KeePass on the flash drive and run it from there.

        The portable version is available from the offical KeePass website.

        Regards

        (0) 
  2. Frank Krause

    Hi all,

    I would like to stress again the SAP view on the “saving passwords in SAP Shortcuts” feature.

    1) Using this feature is a security risk. In the interest of all users we strongly have to mention again that it should not be used. This holds true especially if users are not aware of the fact that an SAP Shortcut with full credentials in it can be used by anybody to log on with a foreign user account. Yes, you may say that you protect the files on your hard disk, but will all users do this (or will they even mail the shortcuts)? From SAP perspective this risk should not be ignored and therefore the administrators should NOT enable the feature.

    2) There are better and more secure alternatives to the feature available (SSO solutions); if it is just about remembering passwords there are many programs available which store passwords in a safe way.

    3) The password saving feature does not have a future anymore. With the introduction of SAP UI Landscape it has been removed and even though it is still working for saplogon.ini it is just a question of time until SAP GUI for Windows will no longer support saplogon.ini at all (before you ask: SAP GUI for Windows 7.50 will still support saplogon.ini). This feature will thus disappear.

    4) SAP UI Landscape is already in release 7.40 mandatory for the combined usage of SAP GUI for Windows and the SAP Business Client. If you turn off SAP UI Landscape you cannot run this combination which adds a lot of value for end users.

    My summary is therefore: Don’t use this feature!

    Best regards,
    Frank

     

    (1) 

Leave a Reply