Home / SAP Single Sign-On

SAP Single Sign-On

SAP Single Sign-On: Authenticate with Kerberos/SPNEGO

Overview The SAP Single Sign-On product offers support for Kerberos/SPNEGO. You can use Kerberos authentication tokens to easily implement a single sign-on solution for your SAP systems. This requires little implementation effort, but provides a considerable simplification to your employees’ authentication processes. Using Kerberos technology via SNC or SPNEGO, a …

Read More »

SP2 for SAP Single Sign-On 3.0 Now Available

This week, SAP released the latest support package for SAP Single Sign-On 3.0. Support Package 2 contains several new features and functions as we continuously enhance the product to fulfill customer requests and upcoming security demands. New features include: Certificate Lifecycle Management for SAP NetWeaver AS ABAP and Java Automated renewal …

Read More »

ABAP SPNEGO troubleshooting

SPNEGO Token based SSO support is one of the best things to happen for the ABAP Server. Though we had it for the JAVA Server, it was missing on the ABAP Server. With SAP Single Signon product licensing, this feature can be enabled and used on the SAP ABAP Server …

Read More »

Secure Login Server: Track User Enrollments

CHALLENGE You need to know how many user enrollments have been performed by Secure Login Server in a given period of time, either for auditing reasons, to optimise the system resources, to find peaks and clusters in your user´s SSO day, or to find issues and potential attacks. SOLUTIONS Secure Login …

Read More »

Using UME groups in an authentication stack

The challenge In some rare cases it is necessary to include the check for a user group in the authentication stack. For example, in the enrollment of systems for the certificate lifecycle management, no authorizations are checked. The authentication suffices. But what if you don’t want to add second factors …

Read More »

SAP SSO 3.0 and SSH: Select your keys

SAP SSO and Secure Login Client offers an SSH Key Agent since version 2.0. However, when you have a lot of local X.509 certificates (we do not support those short-lived ones from Secure Login Server), SSH connections may fail. In most cases, this happens because of a small value in …

Read More »

SSO Solution Also for Shared Mobile Devices

The new technologies offer better control over the real-time business data of the company. SAP customers already run a broad range of cloud solutions that help them to sell better, control easier their stock and inventory, purchasing and production processes, etc. There are also analytical solutions from SAP that use …

Read More »

SAP Single Sign-On 3.0 Now Available

On July 4, 2016, SAP released the latest version of the SAP Single Sign-On product. Release 3.0 expands the existing coverage for mobile and cloud scenarios, modernizes the X.509 certificate-based scenario, simplifies implementation through close platform integration, and offers continuous improvement of security protocols based on market requirements, among other …

Read More »

SP6 for SAP Single Sign-On 2.0 Now Available

This week, SAP released the latest support package for SAP Single Sign-On 2.0. Support Package 6 contains a number of new features and functions as we continuously enhance the product to fulfill customer requests and upcoming security demands. New features include: Certificate Lifecycle Management for ABAP Application Servers Automated renewal …

Read More »

SSO operational documentation with Kerberos

Dear all, after SSO rollout with Kerberos we created a SSO operational documentation which can be useful for similar SSO operational issues. Here are the most important themes from our document, due to the data protection just a common information provided. – Troubleshooting Server AD Client – Normal operation User …

Read More »

Kerberos/SPNEGO for SAP AS ABAP in a Multi Domain Environment.

What to consider when implementing Kerberos/SPNego scenario for SAP AS ABAP using SAP Single Sign-On product in a Multi Domain environment. Windows domain and forest containers are used to meet different authentication and authorization requirements in the corporate landscape, like for example centralizing resource management, organizing network objects into a …

Read More »

Helpful SSO links!

Hello all! Following these notes and SCN links is really helping me on my journey to setup SSO ! SCN community: http://scn.sap.com/community/sso Important BLOGS: http://scn.sap.com/community/sso/blog/2012/08/17/how-to-configure-sap-netweaver-single-sign-on-for-sap-gui-for-windows-with-kerberos-integration –> Nice blog.  Good detail on how to use kerberos to do SSO purely for SAP GUI for windows http://scn.sap.com/community/sso/blog/2015/03/04/reusing-kerberos-token-for-issuing-an-x509-client-certificate-with-secure-login-server –> interesting, http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/50e92ab8-a2a4-3210-aebe-9f21db341d3e?QuickLink=index&overridelayout=true&59983513260820 –> SPNEGO …

Read More »