SAP Assertion Tickets and SAP logon tickets

[Former Member]

Hi

1. What is the difference between SAP Assertion tickets and SAP logon tickets?

2. Is there any Minimum service pack required for implementing these and do what stacks do we need?

3. Will SAP Logon tickets work with Non-SAP systems (lets say .NET) and if so how?

Looking forward to hearing from all of you

Cheers

Jimmy

[WolfgangJanzen]

>

> 1. What is the difference between SAP Assertion tickets and SAP logon tickets?

SAP Logon Tickets will be issued only in exchange to valid credentials (during logon / inbound communication).

-> typically transmitted as (non-persistent) browser cookie (stored in the browser main memory)

-> transmitted whenever the browser sends a http request to a server (domain constraints apply)

-> designed to be used for cross-system SSO (Portal scenario)

SAP Authentication Assertion Tickets will be created (in order to be consumed immediately) when performing an outbound communication (to another system / service provider).

-> typically transmitted in the http header (not as cookie)

-> used in inter-system communication

-> very, targeted (to be accepted only be one single 'intended recipient')

> 2. Is there any Minimum service pack required for implementing these and do what stacks do we need?

SAP Authentication Assertion Tickets started existing as of WebAS 6.40 (not earlier).

SAP Logon Tickets have originally been developed for the SAP Workplace (4.6D); ABAP systems have been enabled to accept such tickets (downported feature, down to release 4.0, see [SAP Note 177895|https://service.sap.com/sap/support/notes/177895]).

> 3. Will SAP Logon tickets work with Non-SAP systems (lets say .NET) and if so how?

Non-SAP system components can evaluate / verify SAP Logon Tickets using a "ticket verification library" (SAPSSOEXT). See [SAP Note 304450|https://service.sap.com/sap/support/notes/304450]

Cheers, Wolfgang