on 09-16-2014 8:35 PM
We would like to do single sign between windows user id and SAP enterprise portal (with different user id). Is that possible using standard SAP ? or do we have to use third party tools to achieve the same? If the above is not possible, we could potentially use the same user id's on portal / window (but our backend SAP systems will have different user ids).
We are on enterprise portal version 7.01 SP11.
Hello Krish,
Please, find the documentation links that explain how to implement Kerberos with SPNego:
Here you will be able to find the details how to resolve the problem with different UserIDs:
Configuring the UME - User Authentication and Single Sign-On - SAP Library
You do not need third party software.
Best regards,
Donka Dimitrova
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Krish,
I'd like more insight into your Requirments.
What is the UME of the Portal ?
You have some users in AD which share the same USERID in AD and Portal
But you also have User in AD which have Diffrent USERIDs in AD and Portal.
And you want to achive SSO between AD and Portal for both set of users.
In the above case too , it is possible to achive SSO with AD for both set of users , with some tweaks in the Datasource FIle.
Let me know UME first.
Regards,
Ashish .A. Poojary
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Krish,
You achieve this by configuring SPNEGO in Portal , Kindly check the below links
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/45/40a0de773a7527e10000000a114a6b/content.htm
http://wiki.sdn.sap.com/wiki/display/Security/Single+Sign-On+with+SPNego+%28NWAS+Java%29
Best regards,
Vijay Kalluri
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thank you. A quick question,
For new SAP users, we started using the same user id as windows user id.
So we have mix of users with same/different user id as windows user id in our landscape. In such a scenario, Is it possible to design a single signon using the same user id and User mapping technique? Or is it possible only to do one or the other (but not both). Meaning we may have to configure user mappping for users with same user id as well?
Typically how much of an effort is it to configure user mapping? Would it require extensive user admin task?
User | Count |
---|---|
86 | |
10 | |
10 | |
9 | |
6 | |
6 | |
6 | |
5 | |
4 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.