Single Sign on Using CUA and LDAP in ABAP based systems.

[former_member464887]

Hi All

I am trying to configure the single sign on in our SAP environment.

I have configured the CUA which is working fine.

I managed to integrate the MS active directory with the help of LDAP transaction and able to retrieve ldap data .

now I want sap users to logon to sap systems using their windows user id(msad id) and MSAD should be the authentication server.

My question is

Do I need to implement SNC in order to achieve the single sign on?

Is my approach correct in order to setup the single signon.

Please guide me towards the right direction ?

my environment

MS2003 active directory

SAP ECC5.0 on Linux/Oracle

Thanks

Amit

[Former Member]

Hi Amit,

I think this question should be asked in forum "Security" not "Identity Management".

To answer your question:

Yes, you have to implement SNC if you want to have SSO from SAP GUI without any additional components like NetWeaver Portal.

SAP offers a libarary for SNC with Kerberos, which is only supported on Windows application servers. Details are described in note [352295|https://service.sap.com/sap/support/notes/352295].

Regards,

Martin