Authentication and Single Sign
Authentication and Single Sign Authentication and Single Sign
Two Worlds: SAP GUI for Windows and Web Traditional SAP GUI for Windows Secure Network Communications (SNC) • SNC partner product • SNC: Microsoft NTLM or Kerberos • SAP Shortcut Method (SAP Logon Ticket) Web SAP GUI for HTML X.509 client certificate SAP Logon Ticket Pluggable Authentication Service (PAS) Use external authentication mechanisms © SAP AG 2005, Authentication and Single Sign On / Patrick Hildenbrand / 36
SSO From Web to Traditional - ITS • Using logon tickets, ITS, and SAP Shortcuts • Logon ticket is passed to SAP Shortcut using ITS service wngui SAPGUI for HTML Web server WGate Alice AGate sapextauth https://host1.mycompany.com/scripts/wgate/wngui/!?~transaction=SU01 Alice R/3 Alice Start SAP Shortcut Alice SAPGUI for Windows Only supported on external ITS up to release 6.10 ! © SAP AG 2005, Authentication and Single Sign On / Patrick Hildenbrand / 37
- Page 1 and 2: Authentication and Single Sign-On P
- Page 3 and 4: Authentication Identifies a Subject
- Page 5 and 6: Why Use Single Sign-On? Typical sit
- Page 7 and 8: What the Administrator Wants … Ce
- Page 9 and 10: Web-Based Authentication Methods
- Page 11 and 12: Authentication and SSL with X.509 C
- Page 13 and 14: Obtaining a X.509 Certificate Digit
- Page 15 and 16: SAP Logon Tickets - SSO Process Por
- Page 17 and 18: What is a SAP Logon Ticket • SAP
- Page 19 and 20: SSO to Non-SAP Components Using SAP
- Page 21 and 22: Multi Domain SSO Recommendation:
- Page 23 and 24: Adding the User Name Header • The
- Page 25 and 26: Header Based Authentication Best Pr
- Page 27 and 28: SAML - SSO Process Authentication A
- Page 29 and 30: Pluggable Authentication Service (P
- Page 31 and 32: Pluggable Authentication Service: A
- Page 33 and 34: JAAS Authentication J2EE Browser Wi
- Page 35: Single Sign-On for SAP GUI for Wind
- Page 39 and 40: Prerequisites 1) Users have the sam
- Page 41 and 42: System Preparation 1. Export Portal
- Page 43 and 44: Agenda Authentication and Identitie
- Page 45 and 46: Single Sign-On Possibilities Authen
- Page 47 and 48: Further Information Public Web: ww
SSO From Web to Traditional - ITS<br />
• Using logon tickets, ITS, <strong>and</strong> SAP Shortcuts<br />
• Logon ticket is passed to SAP Shortcut using ITS service wngui<br />
SAPGUI for<br />
HTML<br />
Web<br />
server<br />
WGate<br />
Alice<br />
AGate<br />
sapextauth<br />
https://host1.mycompany.com/scripts/wgate/wngui/!?~transaction=SU01<br />
Alice<br />
R/3<br />
Alice<br />
Start SAP<br />
Shortcut<br />
Alice<br />
SAPGUI for<br />
Windows<br />
Only supported on external ITS up to release 6.10 !<br />
© SAP AG 2005, <strong>Authentication</strong> <strong>and</strong> <strong>Single</strong> <strong>Sign</strong> On / Patrick Hildenbr<strong>and</strong> / 37
Change language