SSO for cloud application using OnPrem Active directory

[former_member576423]

Hello Experts,

I have configured SAP Idp as a proxy to authenticate cloud applications such as C4C which uses corporate AD credentials. This scenario is working as expected. When the user is in corporate network and opens the C4C url, the url navigates to SAP IdP. The user enters the AD credentials and the login works.

Will it be possible that the SAP idP should automatically authenticate since the user has already logged in corporate network system? The user shouldnt be entering the AD credentials again? I mean to say if the user opens the C4C url while in OnPrem corporate network then the C4C home screen opens without entering the credentials again on the SAP IdP screen?

Thanks,

Mayank

[former_member99753]

Dear Mayank,

To allow users to log on to an application from the corporate network without entering their username and password, You can configure kerberos authentication. First, You have configured Kerberos authentication for the tenant, then for the application.

For further information please see official documentation: Enable or Disable Kerberos Authentication for an Application.

Best Regards,
Zsuzsa Nemeth

[former_member576423]

zsuzsa.nemeth : Thanks Zsuzsa. by tenant you are referring to SAP IDP or Active directory. Similarly Application would be C4C in my case?

Also do you have any guidelines for setting up SAP cloud applications with kerberos and the using Corporate Microsoft Active Directory?

Thanks

[former_member99753]

Dear Mayank,

the tenant is your IDS system id which is used like: <tenant>.accounts.ondemand.com.

Yes, C4C can be configured as an application is your case.

For step-by-step guide, please follow help documentation: Configure Kerberos Authentication.

Regards,

Zsuzsa