8.03.

2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

ERProof » SAP BASIS » Free SAP BASIS Training » SAP Logon Configuration

SAP Logon Configuration

SAP Logon Configuration

SAP Logon is a client software that is necessary for connecting to SAP systems from desktop computers.
This SAP BASIS tutorial provides guidance about SAP Logon configuration. If you are interested in
installation of SAP GUI and SAP Logon, have a look at this tutorial How to Install SAP GUI and other free
tutorials from our SAP BASIS course.

SAP Logon Process

Let’s start with discussing an overview of SAP Logon process. High-level understanding of the process will help to explain details of SAP
Logon configuration.

SAP Logon Process Overview

When user(s) accessing SAP system via SAP GUI, the request is forwarded into ABAP dispatcher for the direct logon. If SAP GUI is using
logon group, the logon will be sent to the message server for purposes of logon load balancing.

Once the request is forwarded into ABAP Dispatcher, the request will be kept in the request queue first. Based on the concept of FIFO (First
In and First Out), the dispatcher will find any free work process based on the user request type and assign it to the user. For example, for
user login request, a dialog work process will be assigned if there are work processes available in the system.

https://erproof.com/basis/free-training/sap-logon-configuration/ 1/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

PVcase: #1 PV Design Tool

PVcase Ground Mount makes it easy to design efficient and

reliable solar plants.

PVcase Learn More

Once the work process is assigned, it will check and compare logon user data (user id and password with the user master data which is
stored in the database. If the logon user data is matching and in sync with stored user data in the database, it will return the positive result
and allow the request in accessing the system. Otherwise, it will reject the request.

SAP Logon Configuration

After SAP GUI installation and patching has been completed, the next step is to configure SAP Logon to connect to SAP system.

1. Click on Create button in SAP Logon as shown below:

Click “Create” Button (an icon of a white sheet of paper)

2. Click Next button:

https://erproof.com/basis/free-training/sap-logon-configuration/ 2/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

Click “Next” Button

3. Fill in the connection details (they will be provided by a person responsible for installation of SAP system):

Fill in Connection Parameters

Connection Type: Choose Custom Application Server (for one server/no load balancing).
Description: You can put any description of the system, e.g. SAP Development System.
Application Server: Enter IP address or Hostname of SAP application server.
Instance number: Instance number of SAP system which is defined during SAP installation.
System ID: SAP system ID with three character which is defined during SAP installation.

What is SAProuter String?

https://erproof.com/basis/free-training/sap-logon-configuration/ 3/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
We leave the SAProuter String empty because we are not using SAProuter for SAP GUI connection. We use SAProuter string for
connections outside of internal LAN and via internet. It is another option to access SAP GUI connection without using office VPN/network.

The requirement is to setup SAProuter (normally you should already have SAProuter connection to SAP OSS) with public IP. The SAProuter
server should always resides in DMZ zone for security reasons. Using SAP router string means SAP GUI will first connect through
SAProuter and then it will connect and route to SAP Application Server.

PVcase: #1 PV Design Tool

PVcase Ground Mount makes it easy to design efficient and

reliable solar plants.

PVcase Learn More

The connection from SAP GUI to SAProuter is a connection to port 3299 which is the standard port of SAProuter. To connect to SAPGUI or
SAP Application Server it uses port 32XX and port 33XX for RFC through SAP Gateway. *XX is SAP system instance number.

Example:

SAProuter is running on a server with a public IP address 200.100.101.102 while SAP Application Server is running on a local IP address
10.10.11.12.

In this case, the SAProuter string in SAP Logon setup is H/<public IP of SAP Router>/S/<SAP router port>. In this
example: /H/200.100.101.102/S/3299

Sample Configuration of SAProuter String

On the SAProuter server, we need to allow port 32XX (Dispatcher port). In this example, it is port 3200 because the instance number is ‘00’.
We need to maintain this in saprouttab file.

https://erproof.com/basis/free-training/sap-logon-configuration/ 4/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
P * <your local IP address of SAP server> <your SAP server port>

in our example: P * 10.10.11.12 3200

Next, restart SAProuter services and don’t forget to open port 3200 in the firewall settings for SAProuter server.

4. Click Next button:

Network Settings for SAP Logon

We didn’t tick Activate Secure Network Communication because we are not using SNC. SNC (Secure Network Communication) is an
interface to provide security layer for communication to an external security product. SNC secures all communication between two SNC-
protected products. For example, communication between SAP GUI and SAP Application Server. Only connections that use SAP protocols
like RFC or CPIC will apply for SNC protection. The protection levels of SNC that can be applied are as below:

Authentication only: Verification of the identity of the communication partners and this is minimum protection level.
Integrity protection: System detection on manipulation of the data between the two communication channels.
Privacy protection: System encryption of the messages and/or data being transferred.

5. Click Next button:

https://erproof.com/basis/free-training/sap-logon-configuration/ 5/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

Language Configuration of SAP Logon

6. Click Finish button. Then, you can see the saved configuration entry in SAP Logon. Double click on the connection line to access the
system.

SAP Logon with One Configured Connection

Setting Up Logon Groups

Logon groups are used for load distribution or load balancing. They dynamically distribute user access to application servers. Logon groups
are only possible to configure for SAP systems with two or more SAP ABAP application servers. When users log on to access the system, the
message server will check which application server currently has the best performance statistics or the fewest users and the new users will
be routed to that application server.

https://erproof.com/basis/free-training/sap-logon-configuration/ 6/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
To set up logon groups, please follow the steps described below.

First, create a logon group. Run transaction code SMLG. Click Create button. Enter the name of a logon group (you can put any name). You
can see two SAP instances sapserver01_NW1_00 and sapserver01_NW1_02. It means that there are two SAP instances or application
servers that have been setup for one SAP system. In this example, we created logon group named IVOBE. Next, we will add SAP instances
into logon group and click Copy button.

Maintain Logon Groups

Assign an Instance to a Logon Group

https://erproof.com/basis/free-training/sap-logon-configuration/ 7/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

Assign an Instance to a Logon Group

Instances Assigned to Logon Groups

Click on Save button.

Before you setup SAP load balancing in SAP Logon group, you need to maintain SAP Message Server port number in Windows Services
File. You can find SAP Message Server port number in the transaction SMMS.

Check SAP Message Server Port Number

https://erproof.com/basis/free-training/sap-logon-configuration/ 8/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
Edit services file in C:\Windows\System32\drivers\etc folder.

Find and Edit “services” File in Windows

Add sapms<SID> <Message Server Port>/tcp # SAP Message Server Port

For example:

sapmsNW1 3601/tcp # SAP Message Server Port and press Enter before saving the file.

Add SAP Message Server Port

Setup load balancing with SAP GUI Logon. First, click on Create button and then select connection. Press Next button.

https://erproof.com/basis/free-training/sap-logon-configuration/ 9/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

Add a New Connection to SAP Logon

Select User Specified System

Select Group/Server Selection under connection type and then press Next button.

https://erproof.com/basis/free-training/sap-logon-configuration/ 10/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

Group/Server Selection

Enter SAP Message Server details and click Group/Server. You will see a list of SAP logon group and IVOBE group that you have created in
SMLG transaction earlier. (SPACE is the default SAP Logon Group). Choose IVOBE logon group and press Next button. The description
and instance number will be automatically selected by the SAP Logon setup. You can leave System ID blank because it will be
automatically picked up. You can change Description before clicking Next button. Press Next, then Next, and then Finish buttons.

SAP Logon Configuration with Logon Group

The SAP logon group has been setup and SAP GUI connection is ready. As you can see below, System ID NW1 is automatically selected
because it is read from the message server configuration in the services. Remember that in the first tutorial, there was only one SAP
message server for one SAP system.

https://erproof.com/basis/free-training/sap-logon-configuration/ 11/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training

SAP Logon Connection with Logon Group is Ready

Double click the connection line to launch SAP GUI and access the SAP ERP system.

SAP Logon Screen

Now, you need to enter your user name with password and click Enter button for authorization in SAP system.

Did you like this tutorial about SAP Logon configuration? Have any questions or comments? We would love to hear your feedback in the
comments section below. It’d be a big help for us, and hopefully it’s something we can address for you in improvement of our free SAP
BASIS tutorials.

Navigation Links

https://erproof.com/basis/free-training/sap-logon-configuration/ 12/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
Go to next lesson:

Go to previous lesson: How to Install SAP GUI

Go to overview of the course: Free SAP BASIS Training

Page last updated by Cleo Isco on November 15, 2017

8 thoughts on “SAP Logon Configuration”

Brian Barker
November 15, 2017 at 3:57 pm

The SAP LOGON process is repeated twice in this tutorial.

Cleo Isco 
November 15, 2017 at 6:03 pm

Thank you for pointing this out! The tutorial has been updated.

Hassan khanafer
December 8, 2017 at 4:18 pm

Hello,

Thanks for the tutorial.

I have just a question reagrding the load balcnaing connection to the SAPGui using the message server:

When the saplogon process connects to the MS and asks for the favorite server of the logon group, does the message server sends back the
IP adress of the favorite server or the servername?

Is there a way to force the message server to send back the servername if this is not trhe case?

Regards,

Cleo Isco 
December 11, 2017 at 9:20 pm

The message server will sends back the IP address (not the hostname) and port number (32xx) where XX is the instance of the favorite
server. The IP address is linked to hostname or servername. SAPGUI will use this information to connect to the SAP Application Server.

Paul Legaspi
January 11, 2018 at 9:18 am

https://erproof.com/basis/free-training/sap-logon-configuration/ 13/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
Hello,

Thanks for the tutorial, after I followed the step by step of SAP Logon Groupl. I get error hostname ‘nihlgetnodeaddr’ unknown when selecting
the group/server selection in the connection type. Hoping for the reply. Thanks in advance.

Victor Soto
January 17, 2020 at 6:33 pm

Does any body knows, how to connect sap for java with gruop servers?

Achsah
February 10, 2020 at 4:43 pm

I am able to connect, but whenever I reopen SAP, I have to recreate the connect. Why is that?

Hacer Gören
May 17, 2020 at 12:11 am

hallo, ı can able to connect when i login witouth sso but if ı prefer with sso login i get ‘hostname **.com.tr’ unknown. please check application
server.

how can i do about this issue.. Please help me 🙁

LATEST POSTS RECENT COMMENTS

How to Repackage a Transport Request (TR) in SAP? Milena:

https://erproof.com/basis/free-training/sap-logon-configuration/ 14/15
8.03.2024 11:43 SAP Logon Configuration - Free SAP BASIS Training
It is not very common but sometimes one might need... THANKS A LOT for your valuable work! A few comments to this article: 1) It
would be...
What is SAP IMG? – SAP SPRO Transaction
When somebody says SAP IMG or SAP SPRO, they usual... Cleo Isco:
The main table for BOM explosion data in SAP is typically the STKO table,
SM37 – SAP Background Jobs which conta...
SAP Background Jobs are used to execute long runni...
Mohammed:
What is RICEFW in SAP? What is the table name to get sub-assembly components. We can't get it from
All the functional and technical consultants work ... STPO &...

What is S/4HANA? – The Latest ERP from SAP Shree:

The fourth generation of SAP Business Suite is cal... could provide relevant interview questions...

Cincinnati:
Is the zeblearn training Institution fake?...

USEFUL LINKS ABOUT US

Contributors This is an unofficial blog about SAP certification, SAP training, and other things related to
one of the world's leading ERP system.
Terms and Conditions
This blog is independent and NOT affiliated with SAP SE (the company behind SAP ERP
Privacy Policy
system). Your usage of this website signifies your agreement with our terms and condi-
Contact Us tions. We would be happy to hear your feedback or questions.

ERProof / Blog About All Things Related to SAP / © 2011-2024 ERProof All Rights Reserved

https://erproof.com/basis/free-training/sap-logon-configuration/ 15/15