SAP Solution Manager 7.2 · Managing Security

How do you securely expose Fiori apps externally, and why never connect directly to SolMan?

Only mobile-optimized apps (system monitoring, end-user experience monitoring, message flow monitoring).

Use the SAP Web Dispatcher as an application proxy in a DMZ — external connections never reach SolMan directly (external → Web Dispatcher → a new connection to SolMan). E.g. Internet → Web Dispatcher (443) HTTPS, Web Dispatcher → SolMan (8443) HTTPS. SSL types: wdisp/ssl_encrypt=0 (terminate, forward unencrypted), =1 (terminate then re-encrypt), =2 (don't terminate, encrypt to backend).

This is one card from the KnowCard library. The full way to learn it — spaced-repetition review, progress tracking, and AI explanations — lives in the KnowCard app. We’re in private beta now; iOS & Android are coming soon.

Join the private beta

Already a tester? Sign in →

More in Managing Security

How are SolMan roles structured, and why does copying SAP roles into your namespace add upgrade work?
How is the SAP Web Dispatcher configured for SolMan, and how does one support multiple backends?
What does the User administration tool do, and what are its three tabs?
What's a common SolMan security pain point, and who should own SolMan authorizations after configuration?
What are the two options for creating SolMan roles, and which has the least maintenance?
How is Fiori security structured, and what's special about the SAP_SMWORK* roles?