SAP Knowledge Base Article - Preview

3152577 - Blocking URLs based on query-string values

Symptom

You want to set a rule on the ICM or SAP Web Dispatcher to avoid access to certain URLs. For example, users bypassing saml2 authentication with parameter "saml2=disabled".

Parameters wdisp/permission_table and icm/HTTP/auth_<xx> cannot be used in this case, as the filter criteria will be the query part of the URL (included after '&' string).


Read more...

Product

SAP NetWeaver all versions ; SAP Web Dispatcher all versions

Keywords

&saml2=disabled, saml2=disabled, query string, QUERY_STRING, RegForbiddenURL, icm/HTTP/mod_<xx>, icm/HTTP/mod_, modification rules, block requests, bypassing saml, MFA, SSO, Single Sign-On , KBA , BC-CST-WDP , Web Dispatcher , BC-CST-IC , Internet Communication Manager , BC-SEC-LGN-SML , SAML 2.0 for ABAP , BC-JAS-SEC-LGN , Logon, SSO , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.