sso without datasource

Dear All,

Could you explain me how works the sso (AD - Kerberos - SPNego - SAP Portal) if no datasource (database only) is defined in UME.

I don't understand how works the mapping between the Kerberos Principal Name - Portal User and AD User.

Could someone try to help me on this subject ?

In Database only data source, can I change the Data Source File ? How works the mapping by default in this case ?

Thanks

Véronique