Re: SAP Portal 7.3 SPNego and NWBC SSO with ECC
Hi Samuli, Thanks for pointing out the note. I am working on options for Kerberos authentication SSO for desktop NWBC via SAML 2.0 with out NW SSO 2.0 and instead use the Identiy provider that we have...
View ArticleRe: SAP Portal 7.3 SPNego and NWBC SSO with ECC
NWBC for Desktop can be launched from the portal as long as you build the URL correctly, see this link for details. In order to have SSO in case of NWBC for Desktop, NWSSO (v2+) is the way to go. NWSSO...
View ArticleRe: SAP Portal 7.3 SPNego and NWBC SSO with ECC
Thank you. I am able to launch the NWBC desktop from the Portal but SSO doesnt work right now. It prompts me for a user name and password. I am working with our infrastructure team, to set up IDP for...
View ArticleRe: SAP Portal 7.3 SPNego and NWBC SSO with ECC
That's the expected behavior. I think someone on SCN posted a blog/document on enabling SSO in NWBC for Desktop using SAML. I found at least this reply to a discussion thread, maybe you want to contact...
View ArticleRe: SAP Portal 7.3 SPNego and NWBC SSO with ECC
Ok, I will try it out and update you. I did ask him for how de did it but never heard back.Thanks again.Dhee
View ArticleSSO options to NW 7.01 ABAP Web Services (HTTP only)
We have an environment that includes a 3rd party java web app server which can use most common SSO technologies (kerberos, SAML, X509, etc.), which has custom java apps that make web service (HTTP)...
View ArticleRe: SSO options to NW 7.01 ABAP Web Services (HTTP only)
Hi David, from what you are writing, it sounds to me, that you are using OASIS web services type of connections between two systems. This is not the same as front-end SSO like SPNEGO (Kerberos for the...
View ArticleRe: sapgui sso error: No security credentials were supplied
Dear Clifton, It seems you have a problem with the CNC parameter for the library on the client. If you made the settings with a running SAP GUI it is possible that the parameter might not have been...
View ArticleIs it possible to make the PKI in Secure Login server a sub CA?
Hi there We are very close to moving to production our Secure Login server which will allow us to single sign on to all the SAP systems that we need to logon to. Initially we created a separate PKI...
View ArticleRe: Is it possible to make the PKI in Secure Login server a sub CA?
Hi Anders, yes this is possible.The typical way to integrate Secure Login Server (SAP PKI) into an exisitng PKI (e.g. MS-CA) is to create a Sub CA Certificate which can be imported to Secure Login...
View ArticleRe: Is it possible to make the PKI in Secure Login server a sub CA?
Hi Frane I found a description of how to generate the request for the sub CA here: https://www.websense.com/content/support/library/web/v75/wcg_help/ssl_sub_ca.aspx It seems like a special .cnf file...
View ArticleRe: Is it possible to make the PKI in Secure Login server a sub CA?
Hi Anders, why do you want to import this Sub CA Certificate as a Root CA Certificate in Secure Login Server? From my point of view (let's focus to the User CA) the Microsoft CA will be the PKI in your...
View ArticleRe: Is it possible to make the PKI in Secure Login server a sub CA?
Hi Frane, actually that might be a good idea... I'll import the SubCA certificate as a User CA and then sign the SNC certificates on the ABAP-servers with the RootCA. I'll let you know if that works....
View ArticleRe: Is it possible to make the PKI in Secure Login server a sub CA?
Hi Anders, this is possible.But as always in life it depends to how you want to work later (Maintenance & Administration).Who should create/update the SAP server certificates? From my point of view...
View ArticleSSO using windows Authentication
Dear All, the requirement is to allow users authenticate in SAP using windows (desktop / laptop ) login password . User should be able to login to ABAP and portal systems using the windows system...
View ArticleRe: SSO using windows Authentication
Hi Ranjith, this scenario is possible if you use an Active Directory. With the domain login you receive a Kerberos token that can be used for SSO to ABAP and Java Servers. How to configure this with...
View ArticleRe: sapgui sso error: No security credentials were supplied
On the client side, not much is done besides installing the secure login client with all options selected. It sets these environment variables:SNC_LIB=C:\Program...
View ArticleRegd SAML 1.1 Configuration in SAP Portal 7.01
Dear All We are planning to configure SAML1.1 in our SAP Portal 7.01 SP11 system. I have gone through several blogs & guides to collect the data required for configuring the same. Our scenario is...
View ArticleRe: Regd SAML 1.1 Configuration in SAP Portal 7.01
Dear Anand, The scenario described by you is not possible for the SAP NW Portal 7.01 because with this version the AS Java accepts SAML assertions for Single Sign-On but unfortunately it cannot act as...
View Article