SSO query

[chrisjoice]

Hello,

We have a requirement to setup single sign on for our SAP landscape - ECC, BW and Solman. The issue is not all SAP users have an AD account but use a shared windows account. So we are looking at some sort of SSO mechanism at SAP level if that's possible and easy to implement. Please advise.

Regards

Christina

[donka_dimitrova · Accepted solution]

Hello Christina,

The SAP Single Sign-On product offers such solution. You can simply benefit from the risk-based authentication solution to implement different authentication methods for the different groups of users.

See the details about the risk-based authentication here:

Risk-Based Authentication for Your Critical Business Processes

Using this solution you can implement single sign-on for the systems using short term X.509 Client certificates issued by the Secure Login Server and you can manage the authentication to the Secure Login Server for different users to depend on the user group assignment. For example, for users who have AD accounts you can implement Kerberos/SPNEGO authentication, for users who don't have their own account you can implement authentication to the Secure Login Serve using AS ABAP user and password. You can also implement RFID based authentication if the users who share an AD account work on kiosk/shared PCs. You can find the details about RFID based authentication here:

RFID-Based Identification of SAP Applications Using Employee Badges

If you need further guidance, we can have a call to discuss in details the scenarios that your company would like to implement. Just send me a message on donka.dimitrova at sap.com and I will be able to help you further.

Regards,

Donka Dimitrova

[chrisjoice · Accepted solution]

Thank you for the advise Donka, much appreciated.

Regards

Christina