SAP Note 1039335 - Incomplete logoff from an ITS WebGUI application

Component : Internet Communication Framework - Web Dynpro ABAP

Solution : https://service.sap.com/sap/support/notes/1039335 (SAP Service marketplace login required)

Summary :
After logging off from an ITS WebGUI application, users can rerun the application without needing to log in again due to the retention of the SAP logon ticket (SSO ticket) in the browser cache. To prevent this, modifications in the ICF for WebGUI services are necessary. Steps include creating an external alias for the WebGUI service, mandating the use of "Fields Authentication" for logon, excluding other authentication methods, and ensuring the "System Logon" setting is enabled in service configurations. Note: These fixes are not applicable in portal or SSO-required composite applications.

Key words :
/sap/bc/gui/sap/, browser window remains open, avoid storing logon data, internet communication framework, attached correction instructions, sap logon ticket, system logon reason, alternative logon sequence, logon procedure list, logon data

Related Notes :

1262810Calling logoff page returns RC 255 for cprojects
1147314Session timeout for ITS service (WebGUI) does not work
1058529Incomplete logoff for ITS applications
735612Deleting the SAP logon ticket for ITS applications