Show TOC

Background documentationPrerequisites for Using SNC Locate this document in the navigation structure

Prerequisites

External Security Product

  • The external security product, such as SAP NetWeaver Single Sign-On, must be installed on each of the AS ABAP instances.

    Note the following information from the installation of the external security product. You need it for the configuration on the AS ABAP.

    For more information, see the documentation provided by the external security product vendor.

    • External names of the participants

      You need to know the IDs of the users as they are known to the external security product, as well as the external names of the application servers and other system components.

    • Paths and file names where the external libraries are located

  • You may also need to perform certain activities to establish a secure environment for your application servers or other system components. These activities depend primarily on the security product you use. Make sure you are aware of such procedures and have accomplished them before proceeding with the profile settings on the application server. For example, you may need to log on to the security product or make certain entries in a local server table.

    For more information, see the documentation provided by the security product vendor.

Homogeneous Configuration on All Application Servers

We recommend you configure all of your AS ABAP servers the same way, with the exception of the server-specific SNC name and the platform-specific library name.

Caution Caution

Do not create SAP logon groups that contain both SNC-enabled application servers and non-SNC servers! Although it is possible to run SNC servers with non-SNC servers within a complete SAP system, mixing SNC and non-SNC servers in a single logon group produces errors in the load-balancing modules.

End of the caution.
Implementation in Phases

It may not be feasible to establish SNC system-wide in a single step. If so, introduce it into sub-systems in phases. You can successfully implement SNC in phases by modifying the profile parameters accordingly. For example, you can allow non-protected connections parallel to protected connections.

More Information

In the topics that follow, we discuss the profile parameters on AS ABAP. These settings provide the framework necessary to operate the AS ABAP using SNC protection. For the individual communication settings, for example, between SAP GUI and the application server, you must decide what level of protection you need and set the corresponding parameters accordingly.

For more information about the steps to take for each of the individual communication partners, see Configuring the Communication Partners to Use SNC.

Note Note

We also provide an overview showing the scenario that we use in our examples in the Appendix.

For more information, see Sample SNC Scenario.

End of the note.