Skip to Content
avatar image
Former Member

(Kerberos Authentication) Windows AD id and SAP GUI id's are different

Hi All,

We are planning to implement Kerberos authentication using our Window AD. I have below queries regarding the same.

1. Our ERP is ECC 5.0 with SAP_BASIS 640 patch 31, will this support Kerberos authentication.

2. If supports, we have different user id's in Windows AD and ECC for the same user. Will this supports. (For example in Windows AD we      have SSOTEST, same user has TESTSSO in ERP)

3. Is Kerberos authentication required separate license.

If possible provide links for the same.

Regards,

Sree

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Dec 16, 2014 at 07:57 AM

    The mapping is taken care of in a table called USRACL. This table is normally maintained using the SNC tab in SU01 t-code.

    Yes, for Kerberos authentication you need to license an SSO product. Either the product from SAP called SAP Single Sign-On or a product from a SAP partner. You can find them all (including the SAP product) in SAP Store (http://store.sap.com)

    Thanks

    TIm

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 08, 2015 at 12:58 PM

    all the same but the lis is this one :

    snc/gssapi_lib /usr/lib/libgssapi_krb5.a(libgssapi_krb5.a.so)

    Add comment
    10|10000 characters needed characters exceeded