Updated August 21, 2026
SAP GUI for Java
This is the SAP GUI client Velo runs remotely. The robot-sap image ships SAP GUI 8.10, Robot Framework, and VeloSapguiLibrary on linux/amd64.
| Kind | UI |
| Remote | Yes — Linux container, Java GUI only |
| Engine | Robot Framework |
| Image | robot-sap |
| Local counterpart | SAP GUI for Windows |
Suites authored against Windows still run here when they stay on the shared VeloSapguiLibrary keywords. Off Windows, VELO_SAP_CLIENT=auto resolves to java.
Runtime in the container
The image is AMD64-only — SAP GUI for Java ships AMD64 native libraries. Video is an ffmpeg capture of the display and is not masked. Avoid printing secrets onto the SAP screen.
SAP GUI scripting must be enabled on the target system (sapgui/user_scripting = TRUE).
Router strings
A route string describes hops through one or more SAP Routers, then the dispatcher.
/H/host/S/service/W/password | Prefix | Meaning | Default |
|---|---|---|
/H/ | Host or IP | required |
/S/ | Service / port | 3299 on a router hop; dispatcher is 32 + system number |
/W/ | Per-hop password | none |
Example (router, then ECC dispatcher):
/H/<saprouter-host>/S/3299/W/<route-password>/H/<ecc-host>/S/3200 Velo normalizes lowercase /h/ /s/ /w/ /p/ on parse. Canonical form is uppercase. Legacy /P/ passwords (pre-4.0A, one substring later) are accepted.
Pass the string into VeloSapguiLibrary Connect (or equivalent) as the connection string. The same password must appear in saprouttab when /W/ is used.
SAP Router and secure connections
When the ECC system is not public, configure SAP Router — scoped saprouttab entries and a firewall rule for Velo egress. That is client connectivity, not a platform tunnel.
SNC / secure logon follows the Java GUI trust store in the image. Treat it as client-specific; do not reuse the tunnel guide for SNC.
Related
- SAP Router setup
- SAP GUI for Windows
- Robot Framework
- Tunnels — when you need a generic outbound channel instead of SAP Router