Software:SAPgui
 SAP GUI for Windows version 6.40 |
SAPGUI is the GUI client in SAP ERP's 3-tier architecture of database, application server and client. It is software that runs on a Microsoft Windows, Apple Macintosh or Unix desktop, and allows a user to access SAP functionality in SAP applications such as SAP ERP and SAP Business Information Warehouse (now called SAP Business Intelligence). It is the platform used for remote access to the SAP central server in a company network.
Family
- SAP GUI for the Windows environment and Apple Macintosh
- SAP GUI for the Java(TM) environment
- SAP GUI for HTML / Internet Transaction Server (ITS)
- Requires Internet Explorer or Firefox as a browser; other browsers are not officially supported by SAP.
Microsoft Windows releases
| Release | Release date | Latest patch | End of life | Features |
|---|---|---|---|---|
| 1.0 | First "GUI" for SAP software; no graphical elements like checkboxes, radiobuttons and icons | |||
| 1.1 | Field length indicated by background colors; fast paths in menus | |||
| 2.0 | New GUI for Windows 3.1; System and Application Toolbar added; icons in System Toolbar | |||
| 2.1 | New graphical elements: checkboxes, radiobuttons, group boxes and push buttons on screen | |||
| 3.0 | Table control introduced; icons added to buttons | |||
| 3.1 | 1996 | Windows95-look with flat buttons; tabstrip control and ABAP List Viewer (ALV) introduced | ||
| 4.0 | Screens contain more information to reduce navigation | |||
| 4.5 | Active X elements introduced; ALV is now based on grid control | |||
| 4.6D | July 2000 | GUI is re-designed; multiple-areas are introduced to reduce need for screen changes | ||
| 6.10 | July 2001 | |||
| 6.20 | March 2002 | December 31, 2010 | ||
| 6.40 | June 2004 | December 31, 2010 | Unicode support extended; accessibility and usability improved | |
| 7.10 | February 2007 | April 12, 2011 | Support for Microsoft Vista and Office 2007; new "Tweak SAP GUI" tool; new ABAP front-end editor | |
| 7.20 | April 2010 | 17 (final) | April 09, 2013[1] | Support for Windows XP; Windows 2003 Server; Windows Vista; Windows 2008 Server; Windows 7 and Office 2010; Built with Visual Studio 2008[2] |
| 7.30 | June 2012 | 15 | July 15, 2015 | Usability enhancements; new customization features; built with Visual Studio 2010 |
| 7.40 | October 2014 | 18 | January 9, 2018 | Replaces Corbu with Blue Crystal; integrates SAP GUI for Windows 7.40 and Netweaver Business Client 5.0 |
| 7.50 | May 2017 | 12 | April 9, 2019 | |
| 7.60 | February 2019 | 2.1 | April 12, 2022 | Introduces Belize theme, aligning GUI's visual design with the rest of SAP's Fiori applications. Retires Enjoy / Streamline / Tradeshow / SystemDependent themes. |
Java releases – for other operating systems
| Release | Release date | Latest patch | End of life | Features |
|---|---|---|---|---|
| 7.10 | October 2007 | 21 | ||
| 7.20 | December 2009 | 10 | January 31, 2013 | Supported OS – openSUSE, Fedora Core, Mac OS X, Microsoft Windows, AIX, OS X Lion, Fedora, Ubuntu |
| 7.30 | December 2012 | 10 | March 31, 2015 | |
| 7.40 | December 2014 | 13 | March 31, 2018 | |
| 7.50 | July 2017 | 2 | June 30, 2019 |
Single sign-on
SAPGUI on Microsoft Windows or Internet Explorer can also be used for single sign-on. There are several portal-based authentication applications for single sign-on. SAPGUI can have single sign-on with SAP Logon Ticket as well. Single sign-on also works in the Java GUI.[3]
Criticism of using SAPGUI for authentication to SAP server access
SAP is a distributed application, where client software (SAPGUI) installed on a user's workstation is used to access the central SAP server remotely over the company's network. Users need to authenticate themselves when accessing SAP. By default, however, SAP uses unencrypted communication, which allows potential company-internal attackers to get access to usernames and passwords by listening on the network. This can expose the complete SAP system, if a person is able to get access to this information for a user with extended authorization in the SAP system. Information about this feature is publicly accessible on the Internet.
SAP Secure Network Communications
SAP offers an option to strongly protect communication between clients and servers, called Secure Network Communications (SNC).[4]
Security
In total, the vendor has released 25 security patches (aka SAP Security Notes). One of the most notorious vulnerabilities was closed among the set of fixes released in March 2017. The vulnerability in the SAP GUI client for Windows allows remote code execution[5]. Also, researchers who identified the security issues pointed out that the vulnerability allows an attacker to download ransomware on the SAP server that would be automatically installed on every workstation within a company[6].
Screen editing with Personas
Since 1998 SAP GUI screens (so-called "DynPros") can be adjusted and customized with GuiXT. Now this can also be achieved with "SAP Screen Personas". Personas is installed on one of the SAP NetWeaver ABAP 7.0x or 7.3x servers in the system landscape. Then it can be used on all SAP NetWeaver ABAP servers with a kernel of 7.21 or higher, including on NetWeaver ABAP 7.11 systems (on which Personas cannot be installed directly).
iOS and Android implementations
Native iOS and Android implementations of SAP GUI are available from GuiXT.
See also
- GuiXT
- Public key infrastructure
- Single sign-on
- Secure Network Communications
- Smartcard
References
- ↑ "Lifetime and Support Matrix for SAP GUI for Windows". http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0f3985b-ebf4-2a10-acba-9d7fe5d3d1d0?QuickLink=sap-gui&overridelayout=true.
- ↑ "Supported SAP GUI platforms". April 25, 2018. https://launchpad.support.sap.com/#/notes/66971.
- ↑ "Single Sign-on for SAP Java GUI". January 10, 2009. http://honk.sigxcpu.org/con/Enabling_Kerberos_in_the_SAP_GUI_for_Java.html.
- ↑ "Secure Network Communications (SNC)". https://help.sap.com/viewer/621bb4e3951b4a8ca633ca7ed1c0aba2/7.52.2/en-US/aa38ff4fa187622fe10000000a44176d.html.
- ↑ Michael Mimoso (March 22, 2017). "SAP Vulnerability Puts Business Data at Risk for Thousands of Companies" (in en-US). Threatpost | The first stop for security news. https://threatpost.com/sap-vulnerability-puts-business-data-at-risk-for-thousands-of-companies/124473/.
- ↑ "Can SAP Be Affected By Ransomware? | SAP Cyber Security Solutions" (in en-US). https://erpscan.com/sap-ransomware/.
External links
- SAP Support Portal (User-ID required).
- SAP GUI history. SAP User Experience Community.
- SAP GUI Community with discussions (forums), a blog, documents and more.
- SAP Netweaver Capabilities - User Interface Technology with discussions (forums), a blog, documents and more.
 |
