Single sign-on to integrated ITS

[Former Member]

Hello Mindaugas,

Original thread reference =>

I'm facing the same problem, could you please detail me your solution ?

Thanks a lot.

Edited by: Julius Bussche on Aug 2, 2009 10:16 PM

[tim_alsop]

You can use one of two solutions:

1. Use Active Directory / Kerberos / SPNEGO by installing a Java stack somewhere in your landscape and using this to authenticate users when they access Integrated ITS on ABAP stack. This is done using re-direction at the time of logon.

2. Setup a PKI and use client x.509 certificates so that each user can logon to integrated ITS without needing a Java stack. This might work for you, but might mean that users workstation has to be same each time (unless you use smart cards or some kind of certificate deliery during loogn to domain) whereas with option 1 the user can logon to any workstaiton and their AD credentials issued during the logon can be used.

Certainly option1 is more popular in my experience and is much simpler to setup and administer.

Thanks,

Tim

[Former Member]

I split this into your own thread. Mail watches by default are only for 90 days and the thread was old... (2007)

Cheers,

Julius