No NWBC Internet Explorer SSO

[Former Member]

Hi everyone,

I have sucessfully installed the Single Sign-On with Kerberos and it is working fine in SAP GUI, as well as the transaction NWBC. However if I try to enter in NWBC directly through the Internet Explorer it doesn't do Single Sign-On.

My questions now is:

Do I need anything else beside the Single Sign-On with Kerberos configuration in order to Internet Explorer do the SSO?

[sandra_thimme]

You do not need anything else: http://scn.sap.com/docs/DOC-40178

[Former Member]

The configuration is for AS ABAP and I have done everything in the videos, however it still the same.

Regarding the SPNego there is any configuration or important pré-requisite besides the following?

AD and ADSI Edit:

Add in the attribute "Service Principal Name" the HTTP/<hostname>, as well as ofcourse the SAP/SL-ABAP-PG1

Parameters:

spnego/enable = 1

spnego/krbspnego_lib = <SAME_PATH_AS_SNC/GSSAPI_LIB>

T-Code SPNEGO:

Add the User Principal Name, like SL-ABAP-PG1@<DOMAIN>

[Former Member]

Hi André

Is it SSO 2.0 or just SNC?

NWBC officially only supports single sign on 2.0 with kerberos.

[Former Member]

Hi Jakob,

It is the Single Sign-On 2.0 with Kerberos and my Library is updated it is the CommonCryptoLib

[julieplummer20]

Since this is a very specific query, and since there has been no response from the community for some time, I would strongly recommend that you open an OSS ticket. This is the most efficient way to get support in this case.

If you give me the OSS ticket no. , I willl check it within 2 weeks.

Best wishes,

Julie Plummer (SAP BC Product Management)