The SAP internet user functionality and Password BAPIs

There is standard functionality built into SAP that allows you to create internet users and manage their login and password credentials. These users are ones which use SAP functionality but only via the web and do not need access to the actual SAP system (via the SAPGUI) or are business partners.

These users therefore login the web application via a generic SAP user id to be able to access the functionality. The only problem with this is that as far as the SAP backend system is concerned everyone logged in to the application is the same user. This is where the internet user functionality comes in and allows you to create new users and maintain their details. Originally this was maintained via transaction SU05 but I think it has been moved to SU05_OLD as it is a little obsolete. It's also probably not something SAP wants to promote any more as they would prefer you to buy enough licences to give all your users a proper SAP user account. This way you would get the standard SAP login functionality (i.e. via SU01) and would not need to worry about any other option

You could obviously code this second layer to manage the different users details such as user id, name, password etc. But this also means you would then have to create, maintain the tables and manage the change/authentication/storage encryption etc. of passwords which could add on a lot of effort to your project.

Anyway here are a few Function Modules/BAPI's used in the processing of these internet users.

BAPI_EMPLOYEE_CHECKPASSWORD
Checks if entered password is correct

BAPI_EMPLOYEE_CHANGEPASSWORD
Change employee's password

BAPI_EMPLOYEE_CHECKEXISTENCE
Check if employee exists

BAPI_EMPLOYEE_DEQUEUE
Unlock an employee account after update

BAPI_EMPLOYEE_ENQUEUE
Lock employees account ready for update

BAPI_EMPLOYEE_INITPASSWORD
Reset employees password



Related Articles

ABAP4_CALL_TRANSACTION sap function module
BAPI_ALM_ORDER_MAINTAIN sap BAPI / Function Module to create a work order
Function module BAPI_EMPLCOMM_CREATE to maintain the SAP HR communication infotype 0105
CLPB_EXPORT sap function module
CLPB_IMPORT sap function module
CONVERT_DATE_TO_EXTERNAL sap function module
CREATE_TEXT sap function module
CURRENCY_AMOUNT_DISPLAY_TO_SAP sap function module to Convert currency value from display to SAP
CURRENCY_AMOUNT_SAP_TO_DISPLAY FM to Convert currency value from SAP to display
DATE_COMPUTE_DAY sap function module
DATE_TO_DAY sap function module
DOCU_READ sap function module
ENQUEUE_READ sap function module
F4IF_INT_TABLE_VALUE_REQUEST sap function module
FILE_GET_NAME sap function module
SAP Application specific function modules
SAP Custom function modules
SAP field conversion function modules
SAP HR specific function modules
SAP development function modules
Retrieve employees address details (own data)
Function Module DYNP_VALUES_UPDATE to Change screen field contents
sxpg_command_execute FM to Execute external commands (FTP Scripts)
DETERMINE_PERIOD FM to Retrieve fiscal year and period
Function module HR_INFOTYPE_OPERATION to maintain SAP HR infotypes
RH_PM_GET_STRUCTURE FM to retrieve HR Organisation Structure
Validate WBS (code used in ME21)
HR_READ_INFOTYPE SAP FM to Read infotype data
READ_TEXT FM to Read SAP texts
ADDR_PERS_COMP_COMM_MAINTAIN to Update sap users email address plus other details (own data)
HR_PERSONAL_WORK_SCHEDULE to Retrieve employees work schedule
NUMBER_GET_NEXT to get next number in number range sap function module
Generate random number using QF05_RANDOM_INTEGER SAP function module within your ABAP code
RSEC_GENERATE_PASSWORD SAP FM to generate user password
SAPGUI_SET_FUNCTIONCODE sap function module to execute function code
SX_INTERNET_ADDRESS_TO_NORMAL SAP function module to check email format is correct