Authenticating R/3 users using LDAP

[Former Member]

Hi,

We are trying to authenticate SAP R/3 users using an already built Microsoft ADS.

We have looked into configuration using trx. LDAP.

But seems like this only helps to synchronize user data between the LDAP and the R/3 system.

We are more looking for the authentication itself being handled by the ADS system.

We do not want to go through the portal for authenticating these users.

Is it possible to do this.?

[gregorw · Accepted solution]

Hello Srinivasa,

if all your Clients and R/3 Servers are Windows based you can choose between NTLM and Kerberos Authentication based Sigle Sign On. Have a look at http://service.sap.com/security.

Regards

Gregor

[Former Member · Accepted solution]

All our R/3 servers are Unix/Linux based.

So is NTLM still an option.

Thanks,

Srini

[darren_hague · Accepted solution]

Of course, Single Sign-On implies that you are using a portal, or a cunningly-configured BSP. NTLM is only an option if using a Windows-based IIS as a proxy to your Unix box. Otherwise, you need to use the SPNEGO login module, which is not on general release (it is available on a consulting basis only - see Michael Sambeth at SAP).

Until SAP use UME within the ABAP core, I don't see an elegant solution to this.

- Darren