Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

procedure SSO

Former Member

‎04-24-2008 4:21 PM

0 Kudos

Can any body help me to find out procedure of Single Sign On between Web GUI and Windows Active Directory users? Please also let me know any third party tool require for configuring this.

regards,

RAM

1 REPLY 1

tim_alsop
Active Contributor

‎04-24-2008 6:16 PM

0 Kudos

Ram,

The procedure is to install a Java Stack somewhere in your network and make use of the Negotiate protocol which is supported by most common web browser (e.g. IE, Firefox). The Negotiate protocol is implemented in a custom login module, and SAP provide one called SPNEGOLoginModule. There are also third-party products available which also include support for the Negotiate protocol, and have some differences, and advantages compared to the login module available from SAP.

Even though Web GUI is running in ABAP engine, you need to use the Java Engine due to fact that you cannot use this type of authentication and SSO when logging onto the ABAP engine. You will need to configure webgui service using SICF transaction and make it redirect to the Java Engine where the login module has been implemented, when authentication is required. This will give Single SignOn experience to webgui users.

If you are interested to find out about one such SAP partner solution, you can visit [this SAP partner catalog site|www.sap.com/eapcatalog] and search for "Active Directory".

To find out how to setup the SPNEGOLoginModule you can search for this name in SAP Help Library ([http://help.sap.com|http://help.sap.com].

Thanks,

Tim