Configuration to pre select the Kerberos token on SLC

[Former Member]

Dear all, I am configuring the SAP GUI after installing the Secure Login Client for NW SSO 2.0. Once the user selects an SAP system for SSO, a pop up window presents all available certificates for the user to select one to be used for SSO.

Is there a way to change a system setting or the Windows registry to have the kerberos token pre selected by default so users don't have to select the certificate everytime they logon ?

Thanks and regards,

Fabio

[frane_milicevic · Accepted solution]

Hi Fabio,

maybe this information in the manual will help:

http://help.sap.com/saphelp_nwsso20/helpdata/en/a7/3e7f11455e435eab298f19dbe298a3/content.htm?frames...

Best regards,

Frane

[Former Member · Accepted solution]

Adrian and Frane, thank you so much for your answers. Yesterday I found it after some reserach. Frane's link points to the right parameter but the registry path is not right in the manual. Here is the right information:

[HKEY_CURRENT_USER\SOFTWARE\SAP\SecureLogin\TokenType]

Value data: kerberos

It will make the kerberos token become the default authentication for the users.

[Former Member]

Dear Fabio,

You can use

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\SAP\SecureLogin\applications\<Application Name>]

with parameter allowFavorite (type DWORD) as following:

Allow the user to select the authentication profile manually in Secure Login Client.

0: User cannot select the authentication profile manually in Secure Login Client.

1: User can select authentication profile manually in Secure Login Client.

The default value is 1.

Regards,

Adrian