I have authentication working where I can logon via SSO with Windows AD authentication and still get to SAP BW via SAP SNC. In getting this to work I had to manually create an alias between the Windows AD account and th SAP Account. We will have thousands of users in our Business Objects environment with users coming and going each day. I have not found a way to automate the creation of the alias. There must be some way to do this, since this seems like it would be a common need for customers that want to access both SAP and non SAP resources in Business Objects. Has anyone found a way to automate the creation of the aliases? Our user ids are the same in Windows AD and SAP, so it doesn't seem like this should be that difficult, but I can't figure this out.