Single Sign On of Windows terminal with SAP ECC 6.0 system !!!!!

[Former Member]

Hi All,

I have ECC 6.0 server in Solaris 9.0, DB 10.2g as database.

Currently we are using CITRIX server for SAP GUI Logon.

Users want a synchronization between their terminals and SAP system. Means Single Sign On.

Thy want automatic sign on to the SAP system when they are starting their terminals.

Users are working on windows XP systems.

Is there any relevant document regarding this.

I have also raised this question to security forum but did not get any reply till now!!!

Thanks In Advance

Regards,

Ami_Eka

[markus_doehr2]

You can use http://osdir.com/ml/encryption.kerberos.general/2004-11/msg00007.html as reference. We use that method on Linux, Solaris and HP-UX and it works flawlessly.

Markus

[Former Member]

Hi Ami,

There is a SAP note (352295) that talks about that and also there are some other documents that you can find on the Microsoft & SAP Alliance web page at the following URL:

http://www.microsoft.com/isv/sap/technology/interop/ad.aspx

These documents explain how to configure SSO between AD authentication and SAP systems.

Let me know if you need any other help,

Zareh

[Former Member]

Do I need a third party vendor for implementing Single Sign-On as my server is on Solaris......

But users will be working from Windows XP system....

If yes then could u please suggest some of the 3rd party vendor name??

[Former Member]

Ami,

I have not work with any third party vendor on this, but maybe first, you should try using the kerberos tools offered by Solaris and then contact a third party, the note 352295 mentions CyberSafe and CA.

Zareh

[Former Member]

Thanks Zareh for the reply.....

But as I have never used Single Sign-on ....Could u please tell me how to use kerberos tools ??

Regards,

Ami_Eka

[Former Member]

Ami,

The documetation should be provided by the vendor, in this case, SUN. I suggest to contact SUN first and use the GSSTEST. If they do not have something, then the option is to use a third party company as I mentioned before.

You can get the GSSTEST tool from:

[original link is broken]

The following link gives you the generic steps to configure SSO using Kerberos

http://help.sap.com/saphelp_nw70/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/frameset.htm

Zareh