Hi Chenyang Xiong,
password synchronizatioin is not a supported feature for SAP ABAP application servers. Therefor SSO is the only choice, when you want a central token to be used for authentication. For SAP Java sever, you can authenticate against an LDAP server, so there neither SSO nor IDM would be required.
Regards,
Patrick