SSO via Apache Reverse Proxy

[yakcinar]

Hello,

We are trying to implement NW Single Sign-On for our SAP systems.

We are also using Apache Reverse Proxy for our systems.

Some info for implementation;

All Users' Domain : mycomp.com.tr

SL Server FQDN   : nwsso.mycomp.com.tr

Apache Proxy DNS for SLServer : sso.mycomp.com

SPNEGO User : SL-JAVA-SSO (SPNs: HTTP/nwsso.mycomp.com.tr, HTTP/sso.mycomp.com)

SLA Console URL : https://sso.mycomp.com/slac

We are using portal.mycomp.com, bo.mycomp.com, erp.mycomp com DNSs to reach SAP systems through Apache.

All systems are members of the "mycomp.com.tr" domain and all users are members of the same domain.

My question is:

Is it possible to implement SSO when we are using "*.mycomp.com" for URLs although our domain is "mycomp.com.tr"?

And if yes how?

Can you help, please?

Thanks and Regards,

Yuksel AKCINAR

[Former Member · Accepted solution]

Hello Yuksel

The domain of the user and FQDN of the server can be different.

Thanks.

Tapan

[yakcinar · Accepted solution]

Thank you Goyal.

We passed that part and stuck on Apache Reverse Proxy now.

Since there is an Apache Reverse Proxy Server between clients and the Java or ABAP server the certificate is not transferred to the backend system.

Does anybody know how to configure Apache Reverse Proxy to transfer SL Server certificate to  backend systems?

Thanks and Regards,

Yuksel AKCINAR