Skip to Content

SSO with SAPGUI for Active Directory users (for ECC6 on Solaris)

May 02 at 04:14 AM


avatar image
Former Member

Update: Is this video tutorial (Kerberos-Based Single Sign-On to Application Server ABAP) applicable when ECC is installed on Unix? Or is it only for Windows SAP installations?

Our SAP environment is Solaris Primary App Server, RHEL App servers and sapgui clients on windows. Is this option -Environment Using Secure Login Client feasible for SAP on Solaris to authenticate users against Active Directory? If this is possible what components are required and what's the outline steps?

Or is secure login server and SAP Identity provider required for achieving SSO from SAPGUI?

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Best Answer
Carsten Olt May 02 at 02:43 PM

Dear Arun,

the SAP systems underlying operation system (Linux, Unix, Solaris, AIX, OS/400, Windows...) doesn't matter.

In such a setup you only need to two components from SAP Single Sign-On 3.0

  • Secure Login Client 3.0
  • CommonCryptoLib 8.5.x on the AS ABAP (should be already there)

Steps are:

- Create AD Service Accounts and SPNs for each SID


- Configure SAP System SNC and security related profile parameters (according to best practices) and enable SNC

- Perform User Mapping (SU01 / SNC name)

- Install SAP Secure Login Client on the Windows PC (later rollout via software deployment)

- Configure SAP Logon (ini/xml) to enable SNC/SSO

An Identity Provider is not required for SAPGUI and only works for web based access like ICF services, portals etc.

Cheers, Carsten

10 |10000 characters needed characters left characters exceeded