Single sign on using windows user id to SAP Enterprise portal (with different user id)

[krishg]

We would like to do single sign between windows user id and SAP enterprise portal (with different user id). Is that possible using standard SAP ? or do we have to use third party tools to achieve the same? If the above is not possible, we could potentially use the same user id's on portal / window (but our backend SAP systems will have different user ids).

We are on enterprise portal version 7.01 SP11.

[donka_dimitrova · Accepted solution]

Hello Krish,

Please, find the documentation links that explain how to implement Kerberos with SPNego:

Using Kerberos Authentication for Single Sign-On - User Authentication and Single Sign-On - SAP Libr...

Here you will be able to find the details how to resolve the problem with different UserIDs:

Configuring the UME - User Authentication and Single Sign-On - SAP Library

You do not need third party software.

Best regards,

Donka Dimitrova

[Former Member]

Hi Krish,

I'd like more insight into your Requirments.

What is the UME of the Portal ?

You have some users in AD which share the same USERID in AD and Portal

But you also have User in AD which have Diffrent USERIDs in AD and Portal.

And you want to achive SSO between AD and Portal for both set of users.

In the above case too , it is possible to achive SSO with AD for both set of users , with some tweaks in the Datasource FIle.

Let me know UME first.

Regards,

Ashish .A. Poojary

[krishg]

At present , the Data source is 'Microsoft ADS Readonly(Deep Hierarchy) + Database

[vijay_kumar49]

Hello Krish,

You achieve this by configuring SPNEGO in Portal , Kindly check the below links

http://help.sap.com/saphelp_nw70ehp1/helpdata/en/45/40a0de773a7527e10000000a114a6b/content.htm

http://wiki.sdn.sap.com/wiki/display/Security/Single+Sign-On+with+SPNego+%28NWAS+Java%29

Best regards,

Vijay Kalluri

[krishg]

Thank you. A quick question,

For new SAP users, we started using the same user id as windows user id.

So we have mix of users with same/different user id as windows user id in our landscape. In such a scenario, Is it possible to design a single signon using the same user id and User mapping technique? Or is it possible only to do one or the other (but not both). Meaning we may have to configure user mappping for users with same user id as well?

Typically how much of an effort is it to configure user mapping? Would it require extensive user admin task?

[Former Member]

Hello

In case of mix of users with same and different user id you will have to perform user mapping even for users having same user ids.

Regards,

Tapan

[krishg]

Tapan, Thanks. If we decide to not do user mapping and configure single sign on, I presume the system would do single sign-ons for user with same id and  prompt the logon screen for users with different user ids?

[Former Member]

Hello Krish

Yes your understanding is correct.

Regards,

Tapan