Show TOC

SPNego Configuration ApplicationLocate this document in the navigation structure

Use

You use the SPNego configuration application of SAP NetWeaver Application Server (AS) Java for configuring Kerberos authentication. You can access it in two ways:

  • As a standalone application using the following URL in your Web browser:

    <http/https>://<NW_host>:<NW_Web_port>/spnego

  • As part of SAP NetWeaver Administrator

    To access the application, choose Start of the navigation path Configuration Management Next navigation step Security  Next navigation step Authentication and Single Sign-On Next navigation step SPNEGO End of the navigation path.

Prerequisites

The AS Java delivers authorizations to protect access to the user interface for the configuration of SPNego. The table below lists the user management engine (UME) actions and the default role assignments for access to the configuration user interface.

Service/Application

Name

Description

Default Role Assignments

security

editSPNEGO

Provides read-write access to the SPNEGO Web Dynpro configuration application

  • Administrator

  • SPNEGO_ SUPERADMIN

security

viewSPNEGO

Provides read-only access to the SPNEGO Web Dynpro configuration application

SPNEGO_ READONLY

tc~ lm~ webadmin~ permissions

NWA_ SUPERADMIN_ SPNEGO_ CONF

Provides read-write access to the SPNEGO Web Dynpro configuration application

  • Administrator

  • NWA_ SUPERADMIN

tc~ lm~ webadmin~ permissions

NWA_ READONLY_ SPNEGO_ CONF

Provides read-only access to the SPNEGO Web Dynpro configuration application

NWA_ READONLY

The AS Java continues to deliver legacy actions that are no longer required.

Service/Application

Name

Description

Default Role Assignments

security

NWA_ SUPERADMIN_ SPNEGO_ CONF

Legacy action for read-write access

None

security

NWA_ READONLY_ SPNEGO_ CONF

Legacy actions for read-only access

None

The AS Java delivers roles for SPNego configuration as listed in the table below.

Name

Assigned Actions

Description

SPNEGO_ READONLY

viewSPNEGO

Provides read-only access to the SPNEGO Web Dynpro configuration application

SPNEGO_ SUPERADMIN

editSPNEGO

Provides read-write access to the SPNEGO Web Dynpro configuration application

Example

The SAP NetWeaver administrator wants to grant Donna Moore the permissions to administrate the SPNEGO configuration. These permissions are implied by the editSPNEGO action. By default, this action is assigned to the SPNEGO_ SUPERADMIN role. The SAP NetWeaver administrator calls the user management configuration application and assigns the role SPNEGO_ SUPERADMIN to user Donna Moore.

For more information about the user management configuration application, see Configuring User Management.