implement single sign on

[Former Member]

Hi experts,

We have ecc 6.0 abap system and solution manager 7.1 system running on windows.

We want to implement single sign on.

1) Do we need to buy license from sap for single sign on.

2) Doing single sign on using Microsoft kerberos, sso with Microsoft nt lan manager and sso with client certificate, we are not getting the required library files, so do we require to buy license for sso.

[tim_alsop]

For SAP GUI SSO you need to implement an SNC library that uses a Kerberos instead of using NTLM. There is a free SNC library available or you can purchase an SSO product from SAP or from a SAP partner depending on which features you are looking for.

For solution manager, do you want to logon to ABAP stack using web browser or just Java stack ? If you want to logon to java stack you can use SPNEGO, which is free.

[Former Member]

Thanks for your valuable time.

Can you please share the path for free SNC library and it is secure ??

YES we want to logon to ABAP for solution manager.

which method we should use??

If you have document, please share.

[tim_alsop]

ABAP logon to solution manager using web browser or using SAP GUI only ?

[Former Member]

Only SAP GUI

[tim_alsop]

ok, thought so.  So, you need to decide if you want to try the free SNC libraries which will have the disadvantage that they are not supported by anybody. Alternatively you can invest in a commercial SNC library for SAP GUI logon to ABAP systems. As mentioned previously you can choose a product from a SAP partner or use the SSO product from SAP themselves.

Regards

Tim

[Former Member]

Thanks Tim,

But can you please guide me how and from where i can get the free SNC libraries.

IF it is possible please share the path.

[Former Member]

Hi Ashu ,

Please refer to the following SAP Note 1643878 - Release Notes for SNC Client Encryption for more information. This component is only to secure your communication from SAP GUI to your ABAP server.The implementation of SSO using kerberos ticket or certificate based login required a license.

KR

Valerie