Single Sign-on to ABAP Webdynpro application

[Former Member]

Hello,

We are planning to implement Single Sign-on in our SAP ECC6.0 EHP5 environment with Windows AD. I have configured the SSO of SAP GUI with AD using the Kerberos authentication and it works fine. So users now do not get prompted for their login credentials in SAP when they are logged on to their Windows account. But we have developed some ABAP webdynpro applications and when we access the application vial url e.g https://<host>:<port>/sap/bc/webdynpro/sap/zxx we are being prompted for a user id and password. And instead of the windows credentials we have to provide the SAP login credentials to open the application.I went through some forums and it looks like we cannot connect to the webdynpro application using Windows SSO, but it requires a Netweaver Portal. But currently we are not planning a Netweaver portal in our environment, so can you suggest a good alternative method for implementing SSO for Webdynpro ABAP?

Thanks

Deep

[Kaempfer · Accepted solution]

Hi Deep,

did you checked the solution SAP NetWeaver SIngle Sign-On? With this product you are able to implement SSO for different clients (SAP GUI for Windows, SAP Business Client, Bex Explorer, Web Browser). It is supporting also different SSO standards like Kerberos, SAML or X.509 certificates.

http://help.sap.com/nwsso10

http://www.sdn.sap.com/irj/scn/index?rid=/webcontent/uuid/70d49577-5863-2e10-20a8-f6cd79adf434

Regards

Matthias

[Kaempfer]

Hi Deep,

I also want to recommend this blog:

http://scn.sap.com/people/andre.fischer/blog/2010/03/31/single-sign-on-technologies-supported-by-the...

It is a nice overview for microsoft based enviroments and SSO.

Regarding your SAP Webdynpro ABAP issue:

SAP NW ABAP do not support SPNego at the moment. SPNego provide Web SSO for SAP NW Java with an Microsoft integration.

So SAP offers 3 main techology for Web SSO:

- SAP Logon Tickets (often issues by an SAP Portal)

- Certificates -> SAP NetWeaver Single Sign-On

- SAML -> SAP NetWeaver Single Sign-On

- SPNego -> right now only for SAP NW Java applications

Regards

Matthias

[tim_alsop]

This message was moderated.