regarding SSO setting

[Former Member]

hi all,

Can you suggest me how to make SSO setting for IDM,EP and ABAP?

Do we need to make SSO setting for below combination of systems.

1) IDM - EP

2) IDM - ABAP

3) EP - ABAP

or SSO setting for Just IDM -EP and IDM- ABAP is enough

please confirm.

regards

[Former Member · Accepted solution]

Hi Jai,

Only IDM UI can be configured for SSO either using kerberos authentication or certificates, but not for full solution(IC MMC)

SSO needs to be configured for ABAP & EP as per Netweaver Guidelines.

NW IDM is to manage identities means provisioning & deprovisioning users to ABAP or EP.

regards

Anand.M

[bastian_kromer]

Hi Jaichan,

usually your IDM will be configured to manage identities of the EP and your ABAP Systems. Then you can use SSO for the Portal itself (mostly by using Kerberos authentification); and SSO for ABAP Systems by enabling ticket (certification-) exchange from EP to the ABAP backend.

Hope this covers your question..

regards,

Bastian

[tim_alsop]

>

> usually your IDM will be configured to manage identities of the EP and your ABAP Systems. Then you can use SSO for the Portal itself (mostly by using Kerberos authentification); 
yes, I agree. Using Kerberos authentication allows Active Directory domain to be used as authentication server.
> and SSO for ABAP Systems by enabling ticket (certification-) exchange from EP to the ABAP backend.
If you want SSO for SAP GUI logon to ABAP systems, then SSO2 ticket trust for SSO is not sufficient. Instead, a lot of companies configure SNC authentication to ABAP systems, also using Kerberos - then the user logged onto workstation is authenticated to ABAP systems as well as Poral and other web enabled SAP applications. Obviously, if your Portal application communicates with ABAP system then SSO2 ticket trust method is also required.