SSO with Active Directory and SAP GUI

[Former Member]

We are researching options to use SSO with Active Directory through the SAP GUI onto our Web AS ABAP systems. We currently use Active Directory as our domain and we are looking at options for implementing SSO through the GUI.

Has anyone done this before and have any experience to share?

We currently are running most of our SAP systems on the iSeries, V6R1 and I've found lots of documentation on implementing SSO with the AS running on Windows, but nothing for running on the iSeries.

I found some information for using Kerberos authentication for the Web AS Java, but nothing for the GUI to the Web AS ABAP. Is Kerberos the best practice method for SSO? Or is there another method that works?

Does anyone have any experience setting this up or know of any documentation to point to?

Thanks!

Dale Dingmann

[Former Member · Accepted solution]

Hi Dale,

we did this several times for other customers on iSeries.

There is a very good whitepaper from Kolby Hoelzle:

http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP101228

But, as often, this contains several pit falls, so it might make sense to talk to a consultant, that did this already ...

Regards

Volker Gueldenpfennig, consolut international ag

http://www.consolut.net - http://www.4soi.de - http://www.easymarketplace.de