Dear Donka,
Thanks very much it is very detail.
BTW, I would like to calrify again that I cannot "get rid of AS JAVA".
Is it based on the case that i choose to use product SAP Netweaver Single Sign-On only?
(or actually i have no other choice...lol ?)
And is it because SAP Netweaver SSO have to be setup in AS JAVA? (install secure login server, etc..I read this before "http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c040f4a9-0387-3010-9081-dbce2724215d&overridelayout=true"
If yes, is it recommended (or necessary) to setup a standalone NW AS JAVA to support "SAP Single Sign-On" product feature?
####
Acutally, I remember it should be able to make SAP ABAP Webgui SSO workable with something like below (long time ago i cant remember all step):
t-code: STRUSTSSO2
create cert
CA sign request
Mapping X.509 Certificates in Table USREXTID
I'm thinking, for SAP Fiori scenario, can it be done as the same?
(assume that i don't have to relate to AD user account anymore; or i just enable SNC SSO for Intranet while X.509 for Extranet access)
###
Regards
Gary