![]() The configuration in place which offers that silent sign on capability through SAP Logon doesn’t allow the same convenient approach for Web Browser based access. The same restriction applies to transactions such as SNC1 or SNC4 and I suspect that many others suffer from that given. The company has a Central User Administration (CUA) infrastructure to handles the users in all the SAP Systems, their configuration can thus not be updated directly using the SU01 transaction, without using the CUA. Most of them don’t even have a password defined in the SAP Systems. Thanks to the usage of SNC, the end-users never had to know the password they would have had to use to access those systems if they had to be accessed differently. ![]() The users can thus access each system without providing any user and password. Each pre-configured entry of the SAPLogon.ini file makes use of SNC and relies on a messaging server to establish the connection to the SAP System. The profiles in SAP Logon are pushed to the end-users by the system administrators and they don’t have the capability to modify easily (through the GUI) the preconfigured entries. Here are the given from the use case based on which we built this knowledge.Ī company running many SAP Systems, most of the time in a 6-tiers environments (X, D, E, Q, R, P), is using Secure Network Connection (SNC) to authenticate its users without providing any credentials to SAP Logon. This document is focused on the setup of Kerberos and SPNego or more specifically on the update of its implementation since setting it up on a green field is already largely covered. Whether one alternative suits better than another one is left to one another’s appreciation. While some likes the usage of x.509 certificates or SAML, other prefers the Kerberos, SPNego and Secure Network Connection alternative to only mention some of them. The implementation of Single-Sign On (SSO) in a company can be done following different approaches. ![]() ![]() How-to-Guide – How to upgrade the implementation of SNC/Kerberos/SPNego ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
January 2023
Categories |