Single Sign-On for the SAP GUI 

Use

The SAP GUI’s Single Sign-On (SSO) functions enable you to configure transparent user authentication for access to AS ABAP systems. With SSO, SAP GUI users can only select the AS ABAP system to log on to from the SAP Logon Pad, without needing to interactively provide a user name and a password.

You can use the SSO functions of the SAP GUI to facilitate user access to multiple AS ABAP systems in an SSO environment. In addition, the use of SSO can reduce your administration costs, while strengthening the overall security of your systems.

Prerequisites

·        The SAP Logon Pad is installed on client computers. SAP GUI users that are enabled to use SSO can access AS ABAP systems by selecting them from the SAP Logon Pad.

·        For authentication mechanisms that use cryptographic functions, you must also install the SAP Cryptographic Libraries, available from service.sap.com.

Features

For more information about configuring the AS ABAP authentication mechanisms for SSO when logging on from the SAP GUI, see the following topics:

●      Logon and Password Security

Information about configuring provided security mechanisms when using logon with a user ID and password, for example from an SAP shortcut.

●      Single Sign-On with Client Certificates

Information about the configuration steps to enable SAP GUI logon with client certificates

●      Single Sign-On with Microsoft Kerberos SSP

Information about the configuration steps to enable Kerberos authentication for the SAP GUI

●      Single Sign-On with Microsoft NT LAN Manager SSP

Information about the configuration steps to enable NTLM authentication for the SAP GUI