Single sign-on between LDAP and ECC ABAP

[sunny_pahuja2]

Hi All,

We have one requirement in which we need to implement SSO between LDAP and ECC ABAP system without use of any third party software. We discussed same thing few days ago but did not come at any conclusion. Here I find one document on help.sap.com which says it is possible but only on windows environment using kerbros:

http://help.sap.com/erp2005_ehp_04/helpdata/EN/44/0ebf6c9b2b0d1ae10000000a114a6b/frameset.htm

But in our case, environment is based on I5/OS+DB4. Please suggest if anyone has come across any document to configure SSO between LDAP and ECC ABAP.

Thanks

Sunny

[Former Member · Accepted solution]

Hi Sunny,

Please refer the below threads , it may give you some insight,

http://scn.sap.com/thread/1620211

http://scn.sap.com/thread/1625877

Note 793191 - FAQ: User master synchronization with LDAP directories

Thanks,

Jagadish.

[sunny_pahuja2 · Accepted solution]

Hi,

I already checked SAP note, it talks about synchronization of users but not about single sign-on. Your first thread is useful. But again it contradicts what SAP says- that kerberos can only be used with window environment.

Thanks

Sunny

[Former Member · Accepted solution]

Hi Sunny,

Kerboros supports only windows enviornment( LDAP running on windows and user pc) .. It's true. When SAP Servers are running on Unix or different OS , we may need to load the crypto library files related to SSO so that it will work.

May be you need to raise an OSS message with SAP ...

Thanks,

Jagadish.

[tim_alsop]

This message was moderated.

[Kaempfer]

Hi Sunny,

there is of course the possibility to implement SSO with Kerberos if the SAP system ist not running on Windows, without a third party product.

Whis can be done via SAP NetWeaver Single Sign-On.

If you only want to integrate ABAP systems with a SAP GUI client, you only need Secure Login Client and the Secure Login Library. If you want to integrate als Web applications (Web dynpro Java/ABAP, SAP Portal, non-SAP systems) you need also the component Secure Login Server. All this components are part of SAP NetWeaver SIngle Sign-On.

http://help.sap.com/nwsso10

http://scn.sap.com/community/netweaver-sso

Regards

Matthias

[tim_alsop]

This message was moderated.

[Former Member]

Hi Sunny Pahuja,

Please refer this link it will definitely help you,

http://aq33.com/human-resources/Articles-007879.html

In addition to that,You can refer this for more information,

http://sap10.blogspot.co.uk/2009/07/enable-sap-single-sign-on-on-windows.html

Thanks and Regards,

Dhaya.G

[sunny_pahuja2]

@Dhayalinie: I checked these links but these links talks about kerberos configuration and as I already said kerberos are supported to use in windows environment.

Thanks

Sunny