Regarding portal option. See below:
If I am at my desk/workstation and I want to logon to a specific SAP ABAP system with a specific client, how do I do that ? Imaging a SAP Basis person who wants to logon to client 000 for a specific task, but also wants to be able to logon to the productive client in same system to test/configure the application. Meanwhile, and end user might want to logon to the productive client only.
My point is that SPNEGO (or whatever login module is configured on Java stack) is going to authenticate the user and then the SSO2 logon ticket will be created by the CreateTicketLoginModule, but the SSO2 ticket will have a fixed client in it (e.g. client = 999) since Java stack doesn't have clients like ABAP stack does. If I then want to present this logon ticket to SAP GUI or onto a backend ABAP system via web browser, then how does the ABAP system know whether I want to login to client 000, 100, 200 etc. ? It is possible to configure an ACL on ABAP side to allow the logon ticket issued on Java stack to login to a specific client, but how do I tell the ABAP system which client I want ?
Thanks
Tim