SETUP SECURE LOGIN CLIENT AND LOGIN USING KERBEROS TOKEN [LINKED] #ATR

[AJAYTR_ATR66]

#ATR(8)    [LINKED]

This blog is linked with "SINGLE SIGN ON CONFIG - USING SINGLE SNC NAME TO SUPPORT BOTH X.509 CERTIFICATE AND KERBEROS TOKEN LOGON.

Link: https://community.sap.com/t5/technology-blogs-by-members/single-sign-on-config-using-single-snc-name...

Informative Note: Created this blog to provide information on how to setup Secure Login Client and Login using Kerberos token.

KERBEROS LOGON STEPS

 1) Install SLC Software

•      You can download Secure Login Client from SWDC. Install on your PC.

•      Once installed, SLC will be visible in taskbar tray icon. Click ‘Show’ button and open SLC.

2) Select Kerberos token for SAP Application                         [Log in… Optional]

3) Add/Change SAP GUI Properties

•     Provide your corresponding system details as usual in SAP LOGON GUI – NEW CONNECTION.

  4) In Network settings, Provide below mentioned information

•        Checkbox: Activate Secure Network Communication
•        SNC name: p:CN=SID SID – System ID
•        Security: Maximum Security Settings available [As per User Convenience]
•        Connection: High Speed (LAN)

• Select ‘OK’ and close properties.
• No need to change anything in “Code Page” tab.
• Now, Users can login system with/without password as per user convenience.

• Users will be logged in directly to client which they have access.
• If Users have access to multiple Clients in system, they can select and choose client to login as per their requirement.

• Selected Client – 100 (For Example)
• User logged on Client 100 (SNC - Without Password using Kerberos token)
• Message: SNC logon by 100 USERID for p:CN=USERNAME@WINDOWSDOMAIN

Note: Make sure SNC Canonical saved in ABAP System [as same as Windows Domain ID] before logging in.

Thanks for Visiting !
Please do connect and follow my Linked In Profile - https://www.linkedin.com/in/ajaytr66/

AJAY TR - ATR - SAP BASIS ADMINISTRATOR