Skip to Content
avatar image
Former Member

SAP Portal authentication with CUA

Hi Friends,

I have SAP Portal pointed to SAP ABAP Based system (CUA) as portal authentication. SAP CUA is in synch with LDAP. My question is that does SAP CUA carries the user password ifnormation from LDAP or do we need to manually set the user passwords in CUA again?

Since SAP Portal autheticates with CUA ( CUA will be in synch with LDAP)  , I am assuming that if any changes happend to the user details and password changes  at LDAP level wil be carried over to CUA. Please correct me if my assumption is not correct.

Thanks

Krish

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Jun 06, 2012 at 06:29 AM

    Hi Krishna,

    As per my understanding, user IDs & their attributes like name, telephone, address, etc can be synched between LDAP and SAP CUA. But user's LDAP password is not imported into the SAP system. You will need to set-up user's password in SAP CUA separately.

    Please refer to this thread for further details.

    Thanks

    Sandipan

    Add comment
    10|10000 characters needed characters exceeded

  • Jun 06, 2012 at 06:48 AM

    As Sandipan has mentioned, the users password is not synced between LDAP and SAP CUA. Instead of trying to keep passwords in SAP in sync with password in LDAP (eg. in MS AD) it is very common for customers to use an alternative (more secure) authentication method to logon to portal which does not require a password in SAP user store, and then the SAP password can be deactivated. For example, Kerberos authentication can be used when a user logs onto the portal.

    Add comment
    10|10000 characters needed characters exceeded

    • There are many threads on SCN which discuss this issue, and this is all I am aware of which you can reference when your clients. The thread which Sandipan mentioned at http://scn.sap.com/thread/1918818 is a very good example of a thread which you can reference. if you want an answer from SAP instead of from SCN, then I suggest you open an OSS message and ask SAP for response. They might refer you to SCN.