SAP Auto Login with credentials from Beyondtrust Password Safe - (Moved)

[Christoff]

Good day All

First Apologies if posting in the incorrect area

I have zero programming or programming language skills to start of with

We have a Appliance called Beyond Trust Password Safe. This appliances is managing the passwords for Critical accounts. We have all the DDIC and SAP* accounts in the appliance. Currently the password is viewable and we need to change to a application Session.

This is wat i have currently on my TS and this works if i specify username and password. Logon occurs

#NoTrayIcon
Opt("WinTitleMatchMode", 3)

ShellExecute("C:\Program Files (x86)\SAP\FrontEnd\SAPgui\saplogon.exe")

;start the main window
$Logon = WinWait("SAP Logon 750")
Send("{Enter}")

;wait for the main window and activate it
$Main = WinWait("SAP")
WinActivate($Main)

Sleep (300)

;insert user and password
Send("USER")
Send("{TAB}")
Send("PASSWORD")
Send("{Enter}")

on the Appliance we pass commands like the Username and Password. 

How and where will a command be set to use the password and username from the password vault

 

Thank you in advance

 

[Jos]

Moved to the appropriate forum.

Moderation Team

[Suchi]

can you please share the link to where this has been moved? I am working on a similar problem.

[Werty]

Umm, this is where it has been moved. This is the thread!

[Suchi]

okay so no solution to the question asked?

[Confuzzled]

Another security risk issue that has dire warnings in

 that you may wish to read before venturing down this very risky track.

Please, PLEASE talk to your corporate IT security team before touching the keyboard again. Listen to their warnings.

 

Somehow I suspect nobody is going to help you do something very risky for your company and your budding coding career. If SAP and Beyond Safe thought that they needed any plain text exposed passwords, surely, as major corporate software suppliers, they would have built it into their products, many years ago. The fact that they haven't and you haven't discovered it should cause you to ask why.

The answer might be to do with security, and not how to bypass it.

Edited November 20, 2021 by Confuzzled