Single Sign-On for the SAP GUI

[jayanth_velugati]

Our requirement is to implement SSO where SAP GUI users have to select the AS ABAP system to log on to from the SAP Logon Pad, without needing to interactively provide a user name and a password.To achieve this requirement we need to have CommonCryptoLib as pre-requisite.

SAP NOTE: - 1848999-Central Note for CommonCryptoLib 8 (replacing SAPCRYPTOLIB) describes the licensing cost of implementing User based SSO with X.509 or Kerberos, like SNC for SAP GUI or RFC clients.

So we are investigating into any other option or any 3rd party tools which can be used for SSO with Kerberos option to reduce licensing cost. Please suggest

Thank You

Jayanth

[Former Member · Accepted solution]

I have experience working with cybertrust. It is a nice software, it works for GUI, ABAP and JAVA HTTP(S) as well. It works in kerberos.

Support of cyber trust is also pretty good and they are SAP partner so some one you can consider.

Check them out at below website.

https://products.cybersafe.com/

For Cyber Trust you need to pay, but If you are on windows or Linux I guess you can get the libraries for free.

Regards,

Gopal

[jayanth_velugati · Accepted solution]

Thank you all . I will investigate into the options which you have suggested.

Thank you

Jayanth

[former_member199290]

Hi Jayanth:

For achieving SSO for SAP GUI you might want to check below:

Single Sign-On with Microsoft Kerberos SSP - User Authentication and Single Sign-On - SAP Library

There is no extra license cost but you need to request the Microsoft Kerberos SSP wrapper dll from SAP by opening a message as per Note:

352295 - Microsoft Windows Single Sign-On options

SAP though mentiones that they are not doing any further developments around this method but still support it.

Another option is using latest SSO offering SSO 2.0 - SAP NetWeaver Single Sign-On product (SAP NW SSO) which supports various scenerios but there is additional licensing cost.

SAP NetWeaver Single Sign-On - User Authentication and Single Sign-On - SAP Library

Thanks.

[patelyogesh]

Hello Jayanth,

Did you look through document below

Thanks

Yogesh

[Former Member]

Hi,

U can use "Secure Network Communications (SNC)".

https://help.sap.com/saphelp_nw70ehp1/helpdata/en/e6/56f466e99a11d1a5b00000e835363f/frameset.htm

https://help.sap.com/saphelp_nwpi71/helpdata/en/7e/6ca46b1ee4468a98280ff00db4d97d/content.htm

From SAP Logon Pad, only u need to select system(SID) with client, to login into the system. It can help u.

Regards,

Rahul

[Former Member]

Hi Jayanth,

Have you taken a look at SPNEGNO authentication?  This might achieve your objective at no cost. 

I don't recall which cryptolib it uses though.

Regards,

Graham