SAP Library - Find your answers

Disable SAP USERS to logon multiple times

How to block a user id being logging in for more than twice? i.e. I must restrict the user to be logged in at a time not more than twice (Not sessions, Loggins only).

Set the parameter in RZ10.

login/multi_login_users = set to 1 to activate

login/disable_multi_gui_login = you can put a list of users that should be allow to logon multiple times

List the user IDs separated by commas ",".

Do not leave space characters between user IDs.

Restart the R/3 instance to see the changes.

Multiple logon is against the SAP Licensing policy and should be de-activated in a production system to keep legal.

Set the parameter "login/disable_multi_gui_login" to value "1"

Keyword: BASIS
Title : SAP : Configuring Logon Groups (SMLG)

Keyword: BASIS
Title : Recommendations for Logon Load Balancing and Logon Groups (SMLG)

step 1: save a image in gif format with z or y intial letter

step 2: goto tcode smw0

step 3: select Binary data

step 4: click find button

step 5: click execute

step 6: goto settings > maintain MIME type

step 7: click create > type =*.gif >extension =.GIF click ok and then go back

step 8: click create >OBJ Name=name of image with extension>desc=any>click import

step 9: select image click local object

step 10: tcode sm30

table name >SSM_CUST click maintain
enter parameter RESIZE_IMAGE value =no
START_IMAGE value =name of object name / image name with extention (in capiatl letter)

step 11: click save

step 12: logoff and login.

Keyword: BASIS
Title : Specifying the J2EE Engine Client to Use for Logon Tickets

Terminate the Session after unsuccessful logon:

If you want to prevent unsuccessful logon attempts before the system does not allow any more logon attempts, you can put a parameter in the Instance Profile to prevent them from doing so.

Transaction RZ10--> Instance Profile--> Extended Maintenance

Use the 'login/fails_to_session_end' Parameter.
Default value: 3; permissible values: 1 -99

Note: The parameter is to be set to a value lower than the value of parameter login/fails_to_user_lock.

If you want the user to be locked after unsuccessful logon attempts, you can put a parameter in the Instance Profile to prevent them from doing so.

Transaction RZ10--> Instance Profile--> Extended Maintenance

Use the 'login/fails_to_user_lock' Parameter.
Defines the number of unsuccessful logon attempts before the system locks the user. By default, the lock applies until midnight.

Default value: 12; permissible values: 1 -99

To remove the lock after midnight :
login/failed_user_auto_unlock: Defines whether user locks due to unsuccessful logon attempts should be automatically removed at midnight.

Default value: 1 (Lock applies only on same day); permissible values: 0, 1