SAP and Windows ADS

[Former Member]

We want to implement SAP Portal. The users are already in the Windows ADS with the same user-id as for SAP. How can we implement Single-Sign-On between SAP Portal and Windows ADS?

[JPReyes · Accepted solution]

Hi Hans,

You need to configure the portal to use LDAP as Data Source, and then configure NTLM authentication using a IIS proxy.

Hope this help!

Juan Reyes

[Former Member]

Hi All,

I have the same requirement.. still i am not understanding the exact way of achieving it.

Will you tell me in detail as i am beginner..

[Former Member]

Hans,

if I understand you correctly, you'd like to have your users log in with their Windows ID using SSO from the desktop towards SAP. i.o.w. : they simply log on to their windows workstation, open a browser, enter http://portal.company.com/irj and are automatically logged in. right?

For this, SAP provides two mechanisms, mostly depending on your portal release: Iisproxy and spnego. Both have been covered here multiple times therefore I suggest searching SDN for these terms.

Kind regards,

Dominik Witte