Singl Sign on with Kerberos for SAP/R3 Enterprise 47x200 Kernel 640/101

[Former Member]

Hello,

we want to install SSO with Kerberos and Microsoft Active Directory.

Who can tell me what I have todo in SAP.

Is there any libary, I have to install ? Whre I can find this libary, or must I buy it from other vendors? Are any Variables to set ?

Plaese send me answers only to "what have I todo in SAP", because the Mircosoft Part makes a other Team in our company.

[tim_alsop]

Michael,

You didn't mention, but I assume you are looking to use SAP GUI to logon to SAP. My answer below assumes this is the case.

Generally, if your SAP app servers are on Windows then you have the option to use SNC and gss-api libraries provided by SAP. However, if your SAP app servers are on a mixture of operating systems, including UNIX and/or Linux then you should consider SAP certified products from SAP partners. I represent one such vendor (CyberSafe) so if you are interested to find out more about our products, please contact me using the email address in my business card.

Regards,

Tim

[WolfgangJanzen]

As Tim has stated correctly, SAP provides an SSO solution for "pure Windows environments" (see <a href="https://service.sap.com/sap/support/notes/352295">SAP Note 352295</a>). I also confirm his statement that you require a <a href="http://www.sap.com/softwarepartner">partner product</a> when operating your ABAP application server on a different OS platform - which one you choose is up to you (I cannot give you any recommendation).

Cheers, Wolfgang

[Former Member]

Hello,

I couldn't find any partner product which supports Kerberos-based SSO at WebAS-ABAP on Linux. Do you know if there is one?

Thanks, Matthias

[tim_alsop]

Matthias,

Please check out <a href="http://www.cybersafe.com/links/snc.htm">this website</a>.

Thanks,

Tim

[Former Member]

Thanks, this helps.

Matthias

[Former Member]

Hi,

we find for Solaris this Teams:

http://www.destiny-rules.com/index.htm

http://www.securintegration.de/de.html

Best regards

Michael

[Former Member]

You can also use certificate-based SSO to SAP via SNC/SSL, which has many advantages. SAP user authentication via Kerberos or Windows logon info / Active Directory is still possible. I represent a vendor (SECUDE International) that provides SAP-certified solutions for this scenario. Feel free to contact me directly (e-mail is available via my SDN business card).