SSO between Windows Active Directory and ECC System (ABAP)

[former_member199816]

Hi,

We are having Windows Active Directory in place and we have ECC System and Portal in place.

Previously, users use Portal to access SAP and since SSO is maintained between Portal and AD, user enter Windows Level password in Portal to logon to the SAP.

Now that there are some issues with portal, management has planned to use SAP GUI in place of portal, however the issue is, management wants SSO between Windows Active Directory and our ECC System (ABAP).

Did any one do this before. If Yes, please share the document on proceeding further.

Not sure, how to proceed on this case. Any one's help or advise is highly appreciated.

Thanks & Regards,

C V Jayachandra

[Former Member]

Are you talking about kerberos authentication?

As far as i know, you cannot use kerberos tickets with abap directly (without 3rd party software). One thing i have done is to configure spnego in a portal and create transaction iview's containing a sapgui command.

So you call the portal in your browser -> SSO with SPNEGO. Then you click on your abap system, this starts a sapgui window and you will be logged on with the SAPLOGONTICKET from the portal.

But if you ask me this is a rather complicated way to do single sign on, cannot really recommend that solution.

Cheers Michael

EDIT: stumbled over this thread, check out the link to the realtech paper

So you can use SNC with kerberos, even when your SAP system runs on a non windows platform.

Edited by: mho on Oct 21, 2010 10:59 AM