Authentication and Single Sign-On 

The IT scenario Authentication and Single Sign-On describes an example for integrating different systems into a single sign-on (SSO) environment. Single sign-on not only reduces complexity for end users, saving them valuable time, but also reduces administration effort for resetting passwords, thereby contributing to TCO reduction.

When implementing this scenario, users are initially authenticated in the SAP NetWeaver Portal using information that is stored in an external LDAP (Lightweight Directory Access Protocol) directory. After being authenticated, they are issued a logon ticket from the portal that they can use to access the various systems (SAP or non-SAP) in the backend.

The example shown in this scenario does not involve any development tasks, however, depending on your system landscape, you may be interested in providing additional authentication and SSO functions that are not explained in this scenario, for example, the use of the Java Authentication and Authorization Service (JAAS) to provide for custom login modules for Java applications.

Therefore, for more information about what is available and how to implement additional authentication and SSO services with SAP NetWeaver, see the following:

·        Java: Integrating Security Functions in the section for Authentication and Single Sign-On.

·        ABAP: See System Logon for Web Dynpro for ABAP and Security Aspects for BSP.

For other technologies, see the corresponding documentation that applies to the technology.