cancel
Showing results for 
Search instead for 
Did you mean: 

Single Sign-On

0 Kudos

Dear Experts,

I need an advise, My company wants to Implement Single Sign on for Whole environment.

Our Environment.

SAP Applications

ECC Systems.

HANA DB Systems

Solution Maanger

SAP Fiori

BI Systems,

BO Systems

BEX Applcation.

Analysis for Office.

Microsoft Application.

Active directory.

Office365 Solution

3rd Party Applications.

Portals

Helpdesks.

Please help me out which SAP Solution for SSO will be suitable and need help guides

for solution.

Please help me out, it is urgent.

Accepted Solutions (0)

Answers (1)

Answers (1)

Colt
Active Contributor

Dear Faheem,

SAP SSO 3.0 will help to solve your requirements for the listed SAP applications. Without any further investigation it is guaranteed you will be able to support them. As your requirements are targeting towards general SSO approach with Non-SAP too, you should ensure to stay on standards such as Kerberos, X.509 or SAML I suggest you first carry out an inventory about all the non-SAP applications and check the supported SSO technologies. For AD and O365 you would normally go with ADFS and Federation between your Azure tenant and your on-prem ADFS. Once ADFS is in place you have a full featured SAML IDP you can also use for portals, helpdesk or whatever service provider either on premise or in the cloud. In addtion you can use architecture provided by SAP SSO 3.0 for your non-SAP applications also, e.g. SLS certificates enrolled to your clients, or try to catch as much as possible with standard Kerberos/SPNEGO. Also it is important to check your security requirements. Lots of things to consider, i would recommend advisory (workshop) to plan the project and start inventory of your landscape, applications, requirements, supported technologies etc.

Cheers,
Carsten

Former Member
0 Kudos

Dear Carsten,

We are in a similar situation so I am interested in this thread. SSO to SAP GUI and WebGUI is our main focus for us. By SAP SSO 3.0 do you mean the "Secure Login Client" or "Secure Login Server"?

Thanks

Manish