¿Oracle OAM and Enterprise SSO integration with SAP S4Hana?

[luiscarlos_muz]

Good day experts,

We need some help with a new requirement.

-Currently Implementing S4HANA 1709 + CRM on Premise.

- Our Costumer already has an oracle suite (OIM, OAM, ESSO)

Our requirement is to integrate the currently Oracle Single Sign On solution with the new SAP S4Hana (ECC+FIORI), anyone has any experience or best practices with the Oracle integration, or any thoughts on it.

Any comment is appreciated.

Thanks,

[Colt · Accepted solution]

Hey Louis,

I am sorry, I can't help you with Oracle ESSO experiences, however more generic. You mention SAP ECC and Fiori, so you are talking about SAP GUI which needs to use SNC to support SSO with Kerberos or X.509 Certificates and SAP web-based access such as Fiori which is based on ICM/ICF and supports TLS for SPNEGO / X.509 Certificates or SAML 2.0 and more... If your customer's ESSO-solution from Oracle supports those standards and is able to provide such SSO-tokens for the clients to log in, you are good to go. Don't know if Oracle has a certified SNC library, guess not. I would not recommend using automated password-based approach for SAP GUI login (ESSO) as this brings no additional security. However, I am sure for web-based SAP applications there are lots of possibilities such as IdP (SAML); AD Integration (SPNego) or PKI the ESSO solution from Oracle may offer.

Cheers, Carsten