Skip to Content
author's profile photo Former Member
Former Member

SSO from IE to ABAP system

We have a requirement for users who are on our network to launch a web client from their PCs, like IE, and go to a URL (ssl) which is a web dynpro application on our HCM ABAP system to view paystubs. They want to have this configured to use SSO.

So which of the SSO options would be easiest configuration for this? Would SSO using Logon tokens work?

Thank you in advance...I'm not an SSO expert and this all very confusing!

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Oct 06, 2015 at 06:34 PM

    Hello Dawn,

    There are plently of solutions to that scenario (i.e. SSO via X.509 Client Certificates or SPNEGO Tokens)... however, there is no way to tell which one is the "easiest" solution since we do not know your environment.

    Anyhow, I recommend you to review SAP Note 1257108 which clarifies about SSO options and scenarios.

    At last, I also recommend you to look further on SAP Single Sign-On product ( https://help.sap.com/sso ) which provides a widely options to perform SSO for many scenarios.

    I hope this guides you.

    Best Regards,
    Guilherme de Oliveira
    SAP Active Global Support

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Oct 06, 2015 at 08:42 PM

    The ABAP stack supports a few methods of authentication out of the box, but none of them will give you SSO. Yes, ABAP allows an SSO2 ticket to be sent to authenticate the user, but the SSO2 ticket needs to first be created and that requires that the user is authenticated.

    I recommend that you consider buying a product to implement this, as it will be very hard to implement without buying a product.

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Tim Alsop

      Thank you for your replies...

      I've been digging around and think we might have a solution. Was wondering if you can confirm this would all work. We do actually have a SAML Identity Provider purchased and being used here at work. So if I configure either an ABAP or JAVA system using SAP crypto libraries I can configure a SAML Service provider.

      I'm hoping that will give us our SSO from an AD authentication to a backend ABAP system. So since we already have the SAML Identity provider in place, we shouldn't need any more license costs. ..? confirm please.

      And do most people use like a solution manager system for this Service Provider?

      Thank you in advance - Dawn

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.