Hello Everybody,
Writing this blog to explain how we can access the SAP Web GUI for HTML (Home Page of GUI) of S/4HANA On Premise (SAP Rise) from SAP BTP Build Work Zone. SAP S/4HANA Rise system is a private cloud example, we can use public cloud also.
Here we are using SAP BTP Build Work Zone, Standard Edition. You can also use SAP Build Work Zone, advanced edition also.
Prerequisites: Below are the prerequisites before we start:
-> Within the global account, you should subscribed to SAP Build Work Zone, standard edtion Service and Configured the Cloud Identity Service. The Work Zone will use Identity Authentication Service (IAS) to authenticate the Business Users.
-> In the Cloud Connector, configure the backend s/4hana system with https port for secure tunneled access and exchange the certifiate for Principal Propagation (The user of PP should be same in IAS and S4)
-> Destination should be there in the Sub account and choose the Principal Propagation as authentication.
Configuration: There are 2 ways to configure the application, Page, spaces etc. in the build work zone:
1. Content Federation from S/4HANA system: In this we need to create the artifacts (Space, Pages, app etc.) in the S4 system and federate the content by making the content channel.
2. Local Artifcats in the Work Zone: Create Local Apps, Pages, spaces, groups etc. as required in the build work zone, standard edition.
We will be using the 2nd option as we are going to create local content in the work zone. Below are the configuration steps:
Step 1: Create App in the work zone
Access the Build Work Zone from the Sub account and got to Content Manager and create a local app.
Step 2: Configure the Transaction Code SMEN OR SESSION_MANAGER
If we configure the SAP Transaction Code in the app like we used to do in the Enterprise Portal, it wont work and give the below error “Transaction SMEN is locked”:
After discussion with SAP Team, they told the Restriction to use the SAP Standard Transaction Code like SMEN OR SESSION_MANAGER
Direct access to SMEN (SAP Easy Access Menu) via SAP GUI for HTML from SAP Work Zone or FLP is not supported. This is not a limitation but a product and security decision:
SAP Security Note 2723570 explicitly disables access to SMEN in Web GUI because it exposes non–role-based system entry points, which is a security risk.
SAP Note 2786421 confirms that Web GUI actively blocks navigation to SMEN and redirects back to FLP.
FLP/Work Zone follows a role-based access model, which replaces the old Easy Access Menu by design.
Step 3:
Solution for the above restrcition is, open the webgui service in the app and it will try to access the SMEN code internally, you should give access to user for this tcode.
Below is the application screen shot created in the Work Zone locally:
Note: In the above screen shot I have uncheck the Check Box “Add intent and default SAP parameters to URL” just to keep the URL short. This is optional.
After completing the above configuration, now we can access the application in work zone:
I hope this blog will help people to access the Web GUI for HTML in the browser.
Regards,
Rohit Gera
Hello Everybody, Writing this blog to explain how we can access the SAP Web GUI for HTML (Home Page of GUI) of S/4HANA On Premise (SAP Rise) from SAP BTP Build Work Zone. SAP S/4HANA Rise system is a private cloud example, we can use public cloud also.Here we are using SAP BTP Build Work Zone, Standard Edition. You can also use SAP Build Work Zone, advanced edition also.Prerequisites: Below are the prerequisites before we start:-> Within the global account, you should subscribed to SAP Build Work Zone, standard edtion Service and Configured the Cloud Identity Service. The Work Zone will use Identity Authentication Service (IAS) to authenticate the Business Users.-> In the Cloud Connector, configure the backend s/4hana system with https port for secure tunneled access and exchange the certifiate for Principal Propagation (The user of PP should be same in IAS and S4)-> Destination should be there in the Sub account and choose the Principal Propagation as authentication. Configuration: There are 2 ways to configure the application, Page, spaces etc. in the build work zone:1. Content Federation from S/4HANA system: In this we need to create the artifacts (Space, Pages, app etc.) in the S4 system and federate the content by making the content channel.2. Local Artifcats in the Work Zone: Create Local Apps, Pages, spaces, groups etc. as required in the build work zone, standard edition. We will be using the 2nd option as we are going to create local content in the work zone. Below are the configuration steps:Step 1: Create App in the work zoneAccess the Build Work Zone from the Sub account and got to Content Manager and create a local app.Step 2: Configure the Transaction Code SMEN OR SESSION_MANAGERIf we configure the SAP Transaction Code in the app like we used to do in the Enterprise Portal, it wont work and give the below error “Transaction SMEN is locked”: After discussion with SAP Team, they told the Restriction to use the SAP Standard Transaction Code like SMEN OR SESSION_MANAGERDirect access to SMEN (SAP Easy Access Menu) via SAP GUI for HTML from SAP Work Zone or FLP is not supported. This is not a limitation but a product and security decision:SAP Security Note 2723570 explicitly disables access to SMEN in Web GUI because it exposes non–role-based system entry points, which is a security risk.SAP Note 2786421 confirms that Web GUI actively blocks navigation to SMEN and redirects back to FLP.FLP/Work Zone follows a role-based access model, which replaces the old Easy Access Menu by design. Step 3: Solution for the above restrcition is, open the webgui service in the app and it will try to access the SMEN code internally, you should give access to user for this tcode.Below is the application screen shot created in the Work Zone locally:Note: In the above screen shot I have uncheck the Check Box “Add intent and default SAP parameters to URL” just to keep the URL short. This is optional. After completing the above configuration, now we can access the application in work zone: I hope this blog will help people to access the Web GUI for HTML in the browser. Regards,Rohit Gera Read More Technology Blog Posts by Members articles
#SAP
#SAPTechnologyblog
