Secure Login Web Client - SPNegoLoginModule

[HammerM]

Hi Experts

We are trying to use the Secure Login Web Client to provide authentication to our MS Active Directory using the SPNegoLoginModule

We are receiving an authentication error.

SAP have informed us that the above is not supported although it is detailed in the Secure Login Server guide?

Can you clarify please?...has anyone got this working?

Thanks

Mark

[Former Member]

According to SAP note 1764504

• SPNEGO Login Module cannot be used/assigned in Secure Login Web Client configuration (via Instance Configuration).

I think it has something to do with the different types of Login Modules, SPNEGO just isn't compatible with Secure Login Server. Can you describe your requirement in more detail? Maybe there is another solution to your requirement.

https://service.sap.com/sap/support/notes/1764504

[HammerM]

Hi Samuli

Thank you for the SAP Note clarification....not good news.

Our requirements are to provide Active Directory authentication for our employees to SAP Employee Self Service Web Dynpro ABAP (not Java Portal version of ESS).

We use NetWeaver Business Client for Domain connected clients and also NWBC for html for remote clients not on the Domain.

Thanks

Mark

[Former Member]

Are you accessing the WDAs directly from AS ABAP? In both cases or are you using portal for the browser based NWBC?

NWBC complicates things. Browser based NWBC shouldn't be any problem. You could for example use SAML or go through the portal and generate the ticket there and accept it in AS ABAP. The native NWBC is more complicated. Sorry, I do not have experience in setting up SSO for the native NWBC so I can't give any advice.

[Former Member]

hi samuli,

Please tell me the procedure for configuring the Secure Login Webclient.for AS ABAP systems. we are going to configure SAP NW SSO using x509 certification method.

i read the configuration document but in that not explained clearly.

one more question is

if the user login with the URL with his AD/ID then it will prompt to the SAPGUI or not

Please help me

[donka_dimitrova]

Hello Srinivas,

Please, find the documentation about Secure Login Web Client setup:

Parameters for Secure Login Web Client Configuration - What Is Secure Login? - SAP Library

Please, find also the article about Secure Login Web Client with all the details about when it is recommended to use it. In this article you will be able to find also a good comparison between Secure Login Web Client and Secure Login Client and to choose the proper one for your scenarios:

Best regards,

Donka Dimitrova

[Former Member]

Hi Mark,

If you  need SSO using your AD credentials for NWBC, then you should implement SPNego for ABAP.

The how to is described in the implementation guide here  http://help.sap.com/download/sapsso/secure_login_impl_guide_en.pdf

Chapter 7.3.4.7.5 Kerberos Authentication for HTML-Based User Interfaces Using SAP NetWeaver Application Server ABAP with SPNego

Btw, the SAP Note https://service.sap.com/sap/support/notes/1764504 is releated to NW SSO 1.0.

If you still want to use Secure Login Web Client, SAP SSO 2.0 supports it using SPNego.

KR

Valerie