SSO - Solution for ECC 6.0 (ABAP) - Windows

[Former Member]

Hi all,

We are looking for the best solution to configure single sign on for our ECC 6.0 system.

Landscape

ECC 6.0 - ABAP

BW 7.0

No - Enterprise Portal.

Server OS - Windows 2003

Users login to SAP system only thru SAPGUI.

Requirement:

-

---

Users has to login to their window nt domain and then when they click their SAPGUI pad entry it should automatically connect them to the ECC 6.0 system, without prompting for a userid / password.

Also when the user changes their NT password, their SAP password also has to be changed.

1. What is the best solution can be implemented?

2. Is there any third party tools involved? which we need to purchase?

3. Where can we find this kind of documentation?

Thanks

Senthil

[tim_alsop]

Hi,

This is one of the most asked questions on this forum (at least it seems like it is because I have lost count of how many times I have answered this question). You just need to search the forum and you will find many questions same being answered.

You need to use an SNC library on each workstation running SAP GUI and on each SAP ABAP server. The SNC library will provide the authentication and give you the SSO you are asking for. If users logon to Windows workstation using Active Directory domain, then it is best to use Kerberos so you need an SNC library that uses Kerberos credentials for authenticaiton and network security. The SNC library can be obtained from a SAP Partner, who supports SAP on Windows - some just support SAP on UNIX/Linux. Also, SAP themselves have an SNC library called gsskrb5.dll which you can instll and use which an be done without any costs. The partner products are usually used if you have a mixed server environment or you need additional functionality not included in the SAP library.

Thanks,

Tim