SSO on HANA with Business-Object
Hello Everyone, I am new to SSO Configuration So please guide for this Scenario. I have SAP HANA system as source on that BO Reporting . Now i want to implement SSO windows AD As studied SSO...
View ArticleRe: SAP SSO using existing PKI (Microsoft Certificate Server)
Thanks for the confirmation at a high level.But what I'm looking for and haven't seen, is any guide/blog documentation around this. I've seen the blog about SSO with Kerberos Integration, and SSO with...
View ArticleRe: SAP SSO using existing PKI (Microsoft Certificate Server)
Hi Dan, The configuration for X.509 certificate based SSO between SAP GUI and SAP ABAP is fairly straight forward. Once SSO client installed, you can find your certificate from the SSO client UI...
View ArticleRe: SAML 2.0 Multiple Authentication contexts
Hi David, I guess you can set the login module flags in IDP. On SP side, I remember you can specify which login modules from IDP are mandatory in Trusted Provider tab. Sorry I don't have access to...
View ArticleRe: SAML 2.0 Multiple Authentication contexts
Hello Chenyang,Thank you for your feedback. Unfortunately, there is no setting for these flags on the IDP or SP side with the NW SSO release that we have currently. You can set up the authentication...
View ArticleRe: No user exists with SNC name
Hi Alex, How can we achieve SSO when we use PERSONAS? Regards,Sam
View ArticleSecure Login Server and SHA256-based certificates
Hi guys, can the SLS produce X.509 certificates that use SHA256 as their hash algorithm rather than SHA1 and/or MD5? During the certificate creation process (i.e. Create New Root CA) one can only...
View ArticleRe: Secure Login Server and SHA256-based certificates
Hello Michael, see the latest SP03 PL02 of SLS. We support SHA-2 and RSA-PSS as new algorithms. We recommend SHA256, as SHA512 is not supported by all TLS clients. -- Stephan
View ArticleClik here to view.
Re: Secure Login Server and SHA256-based certificates
Servus Stephan, good to hear from you Could you point me in the right direction in terms of documentation on how to do that please? A fresh install does not appear to be using SHA256, so I guess I...
View ArticleRe: Secure Login Server and SHA256-based certificates
You should see a drop down list in User Certificate Configuration > User Certificate Properties > Signature Algorithm, providing SHA-1 and several SHA-2 with RSA. The installation guide is not...
View ArticleRe: SAP SSO using existing PKI (Microsoft Certificate Server)
Thanks much. Will give this a try.
View ArticleSAP NWSSO2.0 SP03 SPNEGO not working( No Webgui/NWBC or Portal )
Login testing the service WebGUi1. SICF->Default_Host->sap->bc->gui->sap->its->webgui –test the serviceGetting this Prompt for first AD user ID and Password and then SAP user ID...
View ArticleRe: SAP NWSSO2.0 SP03 SPNEGO not working( No Webgui/NWBC or Portal )
Hi, Please check the general troubleshooting note: https://service.sap.com/sap/support/notes/1732610and https://service.sap.com/sap/support/notes/1819808Did you test the connection using IE or FIrefox....
View ArticleClik here to view.
Re: SAP NWSSO2.0 SP03 SPNEGO not working( No Webgui/NWBC or Portal )
I was checking the troubleshooting Note-1732610 and I ran command #klist in my PC and got this Kerbros Server name which does not exist, surprise from where this server:krbtgt is coming I have one...
View ArticleSAPGUI SSO with AD authentication - different domains
Hello, How can we achieve SSO for SAPGUI with AD authentication when SAP system resides in a separate domain and end users are logging in from a different domain? I have read that in order to...
View ArticleRe: SAP NWSSO2.0 SP03 SPNEGO not working( No Webgui/NWBC or Portal )
Hi, You don't need to create a keytab with ktpass if you have done it with transaction "spnego" and sapgenpse. The service user "krbtgt" is the one used for windows login. This is OK. Did you check if...
View ArticleRe: SAPGUI SSO with AD authentication - different domains
Hi Sid, There is no requierement to have your SAP systems in the same domain as you SAP GUI client domain to implement SAP SSO. You did not even need a trusted relation between both domains.Did you...
View ArticleRe: SAPGUI SSO with AD authentication - different domains
Sid Q wrote: Or is there a 3rd party product that can provide this feature?Yes, there is a 3rd party product that can provide this feature. ThanksTim
View ArticleRe: SAP Single Sign-On help for different AD and SAP user
Hi, Many Thanks for the inputs.. For ABAP thinking of writing an LSMW to update the CN for all the users, let me know your view.However little concerned on JAVA side, is there any other alternative in...
View Article