SAP SSO from GUI to ABAP on AIX

[Former Member]

Hi Guys,

I am looking for  a way to configure SSO from GUI to SAP. Gui would be end user's windows systems and SAP on AIX. I cannot user Netweaver Single Sign on 2.0 because the license is out of budget,need an out of box solution. If anyone has done the same please let me know Thanks

[Former Member]

Hi Suhel,

THis is not a big task, follow the sap following sap note,

SAP Notes: 595341, 95810

Pre-requisite:

Check PAM for supporting Operating System

Kerberos Package must be installed on SAP Server

Add the SAP System in Domain, Configure service principle and delegation for user , Enable Kerberos,

Generate Keytab file,

Configure “/etc/krb5.conf” file on AIX side.

Maintain profile parameter.

snc/enable

1

snc/identity/as

p:mmyy@domain.COM

snc/gssapi_lib

/usr/lib64/libgssapi_krb5.so

snc/accept_insecure_gui

1

snc/accept_insecure_cpic

1

snc/accept_insecure_rfc

1

snc/accept_insecure_r3int_rfc

1

snc/data_protection/min

1

snc/data_protection/max

3

snc/data_protection/use

3

snc/permit_insecure_start

1

Map user.

Cheers

Rableen

[Former Member]

will this work without installing any library on user desktop? our SAP systems are on AIX not windows.

[Former Member]

Using modern Windows Active Directory with Kerberos tickets, SSO2 may be required.  What version of Windows Active Directory and what is your Windows domain functional level?

Check the following resources for more details:

Single Sign-On with Microsoft Kerberos SSP - Network and Transport Layer Security - SAP Library

http://scn.sap.com/community/netweaver-sso

Hope this helps,

-Nathan

[Former Member]

Hi,

Check these video.

http://scn.sap.com/docs/DOC-40179

Thanks

Rishi Abrol

[Former Member]

Thanks for your revert, i have seen the video but the secure login client and all are part of netweaver single sign on 2.0 product which we cant implement due to high cost. Need some other way to implement.

[Former Member]

Hi,

Please check the below two notes.

•	Note 595341 - Installation issues with Single Sign-On and SNC
•	Note 352295 - Microsoft Windows Single Sign-On options

Thanks

RishI Abrol