Active Directory, single sign-on and SRM Users

[Former Member]

We are in the process of installing SRM 7.0. using the Classic Scenario. I am seeking clarification around the creation of users in that system given the following:

- My Basis colleagues are in the process of implementing single sign-on using Active Directory for our SAP Portal, SAP Business Warehouse and SRM systems.

- Single sign-on will not at this point be used for our SAP ECC 6.0 system

My questions are:

1. If active directory is being used do we need to create actual users within the SRM system?

2. If actual users in the SRM system are not required, does this have any impact on the creation of the Organizational structure in SRM from the SAP ECC HR hierarchy?

Many Thanks

[Former Member]

Hi Claire,

The Single Sign On work only if user exist on every systemes.

For example :

If you connect trough portal to access ECC and SRM, your user id must exist in ECC and SRM.

For Active Directory you can synchronize your user table to AD by using LDAP option.

The best way is to configure a CUA for ECC and SRM, use the UME of Portal on ECC and synchronize the CUA to Active Directory.

Finally use the SSO certificate between Portal ECC and SRM.

Regards,

Gilles SEBBAG

Sap Technical Consultant.

[Former Member]

hi,

Here are my responses but pls double check with SAP document or with SAP

1. yes. the best approach is to create the users on SRM and get authenticated using active active directory to connect to your SRM using portal.