Registration

Dear SAP Community Member,
In order to fully benefit from what the SAP Community has to offer, please register at:
http://scn.sap.com
Thank you,
The SAP Community team.
Skip to end of metadata
Go to start of metadata

Incorrect worcenters visible although the correct workcenter navigation roles are assigned to the user

Situation

You established a new user with ABAP roles according to SAP recommendations out of the Security Guide: You assigned exactly the recommended workcenter roles + a few functional roles (e.g. for Service Desk, etc.) to the user.

Now you expect that, when connection with the new user via SAP GUI, you will only see the two workcenters "My Home" and "Incident Management". But instead of that, the workcenter application in SAP GUI (transaction SOLMAN_WORKCENTER) or web browser always shows too many workcenters.

Cause

The reason is that you once connected with another user to the workcenters and confirmed using a this user for all connections to the web page (here workcenters):

Some times the web browser does not request again for the user. But this can be configured:

Solution

To solve this you can change Internet Explorer to prompt you when you access a SSO enabled web pages:

  1. Check to which zone the webpage belongs to. e.g.
  2. Go to Tools -> Internet Options -> Security
  3. Choose the appropriate zone
  4. Click on Custom Level
  5. Set the option "Don't prompt for client certificate when no certificates or only one certificate exists" to disable and click OK twice.
  6. You will now get prompted for a certificate when you access a SSO enabled web page. Click cancel to access the web page without SSO or OK to use SSO to authenticate.