SAP GUI SAML2

[Former Member]

Hi Experts,

Does anyone know if is possible to use SAML2 with SAP GUI (version 7.30) for enabling Single Sign On? The most common scenario is to use Kerberos, but I would like to understand if we could use SAML2.

Thanks in advance.

Regards,

Ricardo

[Former Member · Accepted solution]

Hi,

We have investigated the Kerberos option but our SAP ECC App Server is running on Linux. From what I could understand is not possible to configure Kerberos in such a scenario, right? We should be running Windows on the SAP ECC App Server.

Thanks.

Regards,

Ricardo

[jude_bradley · Accepted solution]

Hello Ricardo,

You shoud raise a message in the component BC-SEC-LGN-SML

Regards,

Jude

[Former Member · Accepted solution]

Hi Ricardo-

Kerberos/SAP AS ABAP on UNIX is possible.. Its possible via Secure Login Library which is one of the component SAP NetWeaver Single Sign-On product from SAP. For your specific need you don't need the complete product, only Secure Login Client is required. And, I think it's free, but you should check with your SAP rep. Please refer to this link for more information.. -Vinod

[Former Member]

Ricardo:

AS ABAP provides following possible ways for SSO when logging on from the SAPGUI directly:

=========================================================

For more information about configuring the AS ABAP authentication mechanisms for SSO when logging on from the SAP GUI, see the following topics:

• Logon and Password Security

  Information about configuring provided security mechanisms when using logon with a user ID and password, for example from an SAP shortcut.

• Single Sign-On for SAP Shortcuts

  Information about configuring SSO between a portal and an SAP shortcut.

• Single Sign-On with Client Certificates

  Information about the configuration steps to enable SAP GUI logon with client certificates

• Single Sign-On with Microsoft Kerberos SSP

  Information about the configuration steps to enable Kerberos authentication for the SAP GUI

• Single Sign-On with Microsoft NT LAN Manager SSP

  Information about the configuration steps to enable NTLM authentication for the SAP GUI

More @ http://bit.ly/Rh31ph

However, if you have SAP portal in your landscape, then its possible to use SAML2 and launch SAPGUI with SSO to backend systems.