P. 1
SAP Single Sign on Using Kerberos

SAP Single Sign on Using Kerberos

|Views: 779|Likes:
Published by riveral64

More info:

Published by: riveral64 on May 12, 2011
Copyright:Attribution Non-commercial


Read on Scribd mobile: iPhone, iPad and Android.
download as DOCX, PDF, TXT or read online from Scribd
See more
See less





SAP Single Sign-on Configuration Using Kerberos Authentication from Microsoft

1) Prepare the SAP Server a. Server has to be part of the Active Directory Domain b. The server has to be started using the SAPService<SID> Domain account which has to have administrative rights on the SAP server. c. Copy the file gx64krb5.dll to the folder Windows\System32 or SysWOW64 if is a Windows 64 bit version. You can get the file by seeing SAP Note 352295 d. On the Domain Where the SAPService<SID> resides run the following Kerberos command setspn -A SAPServiceECS/CGI.CORP.CHAMBERLAIN.COM CGI_NT\SAPServiceECS (Domain dependant)

e. Enable SAPService<SID> for Kerberos delegation

f. g. Create the following parameters on the Instance Profile of the SAP server

Stop and restart server 2) Enabling Users to logon using SSO a.CHAMBERLAIN.CORP. On SAP system edit user by running SU01 b.CORP.COM (Domain dependant) .dll snc/identity/as = p:SAPServiceECS@CGI.CHAMBERLAIN. p:SAPService<SID>@CGI.snc/enable = 1 snc/gssapi_lib = C:\Windows\SysWOW64\gx64krb5. Go to SNC tab and fill out the parameter with the following i.COM (Domain dependant) snc/accept_insecure_rfc = 1 snc/accept_insecure_cpic = 1 snc/permit_insecure_start = 1 snc/accept_insecure_gui = 1 h.

Install SAPSSO.CHAMBERLAIN.COM .CORP. p:SAPServiceECS@CGI. see SAP note 595341 b.3) Configuring the SAP Front End a. Modify SAP GUI connection to server by adding on the Network tab the SNC security setting i.MSI on user s computers.

You're Reading a Free Preview

/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->