cancel
Showing results for 
Search instead for 
Did you mean: 

User mapping in AS Java for Kerberos-based SSO

Former Member
0 Kudos

Hi Experts,

We have successfully set up SSO with Kerberos for AS ABAP and AS JAVA.  However, in the AS java, we have only managed to get SSO to work when the logon ID is the same in SAP as in AD by choosing Principal Only and Logon ID as Source in the SPNEGO User Mapping section.  Unfortunately in most cases the Microsoft AD Login ID is not the same as the SAP Login ID.  Has anyone any information on how to map other user attributes, such as email for example?  If in SPNEGO I choose Principal Only, User Attribute and type 'email' in the User Attribute field, for example, it doesn't work...but I'm not sure that the value 'email' is recognised anyway and couldn't find any documentation on this.

Many thanks for your help!

Paul

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Finally I found the answer in the SAP online help.  For the sake of anyone who might be trying to do the same thing, in the User Mapping tab you choose Principal@REALM  in the Mode field, choose User Attribute in the Source field, and type 'email' in the User Attribute field.

Answers (0)