Skip to Content
author's profile photo Former Member
Former Member


Hello All,

I have couple of questions regarding SSO SP4 product which i have just configured in my SAP environment:

environment detail:

SAP ERP 6 with EHP6 ABAP stack only.

Linux with Oracle

SSO SP4- Secure login Library and Secure login client with Kerberos token authentication.

SSO is configured correctly, and it is working fine in sandbox environment.

But i have couple of scenarios, in which i am not aware whether solution can be possible or not, if yes how.

Scenario 1. Let say we have one abap system, where SSO is configured, now we have three workable clients in the same SAP abap system 200, 250, and 300, and few users are existing in all three clients with same user id and password as in AD. So when SSO is configured, how it will decide that user wants to go in which client. Is there any option where we set client as well like language so that user can opt the client selection as well? Or in a simple terms How can user select login clients via SSO configuration?

Scenario 2. How we can login manually with user id and password in an environment where SSO is enabled? Is that possible? For eg. if i would like to login on someone's machine where SSO is configured and if i click SAP system in GUI, it'll allow to go directly in SAP with the person's account on whose machine i am working, is that possible to ogin with my credentials to use SAP?

I am looking in SCN but didn't find the answers. I am expecting expert advice.



Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

1 Answer

  • Posted on Oct 30, 2012 at 07:29 PM


    1. SAP GUI will ask the end User which client he want to use. End Users are also able to define a specific client at SAP Logon.

    2. you can crate at SAP GUI an entry with or without SSO



    Add a comment
    10|10000 characters needed characters exceeded

    • Hi Vikas,

      I would propose that you ask your new question in a new forum. This is not about SSO - this is about user management.

      Some hints where to place your question:

      1. You can setup an identity management system (-> SAP NW IDM as an example)

      2. You create your own batch jobs and tools to do so (but this will require a deep SAP knowledge to do so).

      SAP NW ABAP has its completed independent user and role concept. So in most cases you have to sync data between MS AD and SAP you cannot delegate the work to MS AD.



Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.