SAP Web Application Server Security
Using the Secure Sockets Layer Protocol
The Application Server's Personal Security Environments
SSL Server PSE
SSL Client PSEs
The SAP Cryptographic Library Installation Package
Installing the SAP Cryptographic Library on the SAP Web AS
Setting the Profile Parameters for Using SSL
Configuring the SAP Web AS for Supporting SSL
Creating the SSL Server PSE
Generating Certificate Requests for the SSL Server PSEs
Sending the Certificate Requests to a CA
Importing the Certificate Request Response
Maintaining the SSL Server PSE's Certificate List
Creating the Standard SSL Client PSE
Creating the Anonymous SSL Client PSE
Creating Individual SSL Client PSEs
Specifying that a Connection Should Use SSL
Testing the SSL Configuration
Making Sure the SSL Port is Set up Correctly
Testing the Connection for SSL Server Authentication
Testing the Connection for SSL Client Authentication
User Authentication
Using Logon Tickets
Configuring the System for Issuing Logon Tickets
Obtaining a Certificate Signed by the SAP CA
Using a Self-Signed Certificate
Changing from a Self-Signed Certificate to a Certificate Signed
Configuring the System for Accepting Logon Tickets
Protecting User Information
Using X.509 Client Certificates
Configuring the System for Using X.509 Client Certificates
Pluggable Authentication Services for External Authentication
Authentication Mechanisms Supported by the PAS
Authentication Using Windows NTLM
Verifying User ID/Password on the Windows NT Domain Controller
Authentication Using X.509 Client Certificates
Authentication Using an LDAP Bind to a Directory Server
Authentication Using an Arbitrary Mechanism on the Web Server
Authentication Using a Mechanism Provided by a Partner
Prerequisites for Using PAS
Logon Tickets
Prerequisites for Using Windows NTLM Authentication
Prerequisites for Verifying Users on the Domain Controller
Prerequisites for Using X.509 Client Certificates
Prerequisites for Using an LDAP Bind to a Directory Server
Prerequisites for Using an Arbitrary Mechanism on the Web Server
Prerequisites for Using a Partner Mechanism
Secure Network Communications
Configuring the PAS
Configuring the Use of Logon Tickets
Configuring Windows NTLM Authentication on the Web Server
Configuring SNC
Configuring SNC on the Application Server
Configuring SNC on the AGate
Configuring SNC on the WGate
Installing the PAS
Configuring the PAS Service File
Examples
Specifying the HTTP Header Variable to Use
Maintaining the User Mapping in the SAP System
Configuring the PAS for Providing the SAP User ID Directly
Troubleshooting
Testing the Configuration Using the ITS Administration Tool
Testing the Use of SNC
Testing Logon Tickets and PAS
Checking the HTTP Header Variable
Sample Trace File: SNC Initialization
Sample Trace File (AGate): Successful PAS Using NTLM
Sample Trace File (AGate): SAP User ID not Found
Using the Trust Manager
Terminology and Abbreviations
Certificate List
Certification Authority (CA)
Credentials
Logon Ticket
Personal Security Environment (PSE)
Private Key
Public Key
Public-Key Certificate
Public-Key Infrastructure (PKI)
Public-Key Technology
SAP Cryptographic Library (SAPCRYPTOLIB)
SAP Security Library (SAPSECULIB)
Secure Sockets Layer (SSL) Protocol
Secure Store & Forward (SSF)
SSO Personal Security Environment (SSO PSE)
System PSE
Verification PSE