Options for Fiori sign-on

[former_member212767]

Hi,

We are currently in the process of implementing Fiori apps for HR (Timesheets etc.). We have SAP Gateway as separate instances (ABAP) and are using the usernames from the Gateway to log in. This however is not too convenient as there is a new username/password combo to remember.

What other options for login are there ? I know there is SAP Single sign-on product (with license costs).

Are there other options for single sign-on ? Is Active Directory sign-on possible ?

http://help.sap.com/fiori_bs2013/helpdata/en/3c/7267523eaa1457e10000000a445394/content.htm?frameset=...

Kind Regards,

Jari Pakarinen

[former_member194367 · Accepted solution]

Ok, broadly speaking here are the options available

1. Use X.509 certificate for user login. Most convenient for the user. Config guide is here.http://help.sap.com/saphelp_nw74/helpdata/en/4e/1260981e3d2287e10000000a15822b/frameset.htm

2. Using AD credential - Either using NW Portal (AS Java) or ADFS the user can leverage AD credential to login to GW system. Most widely used in production environment.

     - Logon ticket -> Using Logon Tickets with AS ABAP - User Authentication and Single Sign-On - SAP Library

- SAML -

3. SMP based login - In case of SMP based login, you can use any HTTP security profile which will provide logon tickets. Advantage is that you can use another AS ABAP's credential for login as well.

[former_member82178]

Hi Jari,

Yes, SSO is possible with AD.Hope below link might some help.

http://scn.sap.com/docs/DOC-50394

Thanks & Regards,

Madhu Sudhan