SSO with SAPGUI for Active Directory users (for ECC6 on Solaris)

[former_member255258]

Update: Is this video tutorial (Kerberos-Based Single Sign-On to Application Server ABAP) applicable when ECC is installed on Unix? Or is it only for Windows SAP installations?

Our SAP environment is Solaris Primary App Server, RHEL App servers and sapgui clients on windows. Is this option -Environment Using Secure Login Client feasible for SAP on Solaris to authenticate users against Active Directory? If this is possible what components are required and what's the outline steps?

Or is secure login server and SAP Identity provider required for achieving SSO from SAPGUI?

[Colt · Accepted solution]

Dear Arun,

the SAP systems underlying operation system (Linux, Unix, Solaris, AIX, OS/400, Windows...) doesn't matter.

In such a setup you only need to two components from SAP Single Sign-On 3.0

• Secure Login Client 3.0
• CommonCryptoLib 8.5.x on the AS ABAP (should be already there)

Steps are:

- Create AD Service Accounts and SPNs for each SID

- Create SAPSNCSKERB.pse via CLI or SNCWIZARD

- Configure SAP System SNC and security related profile parameters (according to best practices) and enable SNC

- Perform User Mapping (SU01 / SNC name)

- Install SAP Secure Login Client on the Windows PC (later rollout via software deployment)

- Configure SAP Logon (ini/xml) to enable SNC/SSO

An Identity Provider is not required for SAPGUI and only works for web based access like ICF services, portals etc.

Cheers, Carsten