Regarding SSO between windows and portal

[Former Member]

Hi

We are trying to establish SSO between windows and portal using kerberos authentication.

We have gone through the following link:

http://help.sap.com/saphelp_nw04/helpdata/en/43/4bd58c6c5e5f34e10000000a1553f6/content.htm

Still that is not clear.

Can anyone suggest what are the steps to achieve this task?

Also can anyone let us know what is KDC and SPNegoLoginModule? Is that anything that has to be downloaded?

Is there any step by step guide to achieve this task?

Regards

Yoga

[Former Member · Accepted solution]

Hi,

Traditionally, SSO between windows and portal using kerberos has been done with IIS and IISProxy filter. This is however not supported any more.

From EP6 SP15 SPNegoLoginModule is the way to go.

There are several weblogs and forum post on this, though most if not all describe the deprecated method. Example

https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/920

https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/921

For the new method <a href="http://help.sap.com/saphelp_nw04/helpdata/en/43/49a2aefd975f89e10000000a1553f6/frameset.htm">http://help.sap.com/saphelp_nw04/helpdata/en/43/49a2aefd975f89e10000000a1553f6/frameset.htm</a> seems to be a good starting point.

For kerberos information see http://en.wikipedia.org/wiki/Kerberos_%28protocol%29

BTW: KDC is Key Distribution Center and is usually your domain controller AD server

[Former Member]

Hi Dagfin

Thanks for your reply.

I have already gone through those blogs.But that talks about windows authentication using IIS proxy module.Currently IIS proxy modelue is out of maintainence.

Thats why we are using kerberos authentication.

Already i have gone through those help.sap.com links.

Currently we are working in SP14,EP6.0,IIS5.1,WebAS 6.40.

I want to know that whether anything has to be installed (prerequisites) in my machine for that KDC and SPNegologimodule.

We dont have any AD server as you mentioned.

Regards

Yoga

[Former Member]

Hi,

Since the kerberos module is only supported SP15 I assume it is included (defined as a LoginModule) from SP15 and on.

However, SAP Consulting Germany can give you project support for earlier versions.

Please send an email to the mail address in my profile and I'll send you an SAP presentation on the solution with some more information

Dagfinn

[Former Member]

Check out