Step 4: Policy Configuration 

Use

Use this topic to configure the policy configurations, necessary to enable user authentication with Kerberos on the AS Java.

Prerequisites

You have successfully completed the user resolution mode configuration and test in Step 3: Resolution Mode.

Procedure

...

       1.      Choose the policy configuration to configure for Kerberos.

                            a.      Choose Use existing to select an existing template for Kerberos.

                            b.      Choose Create new to create a new policy configuration template.

We recommend that you choose Create new. In this case the wizard creates a new policy configuration named spnego. You can use this policy configuration to easily manage the authentication methods for applications.

       2.      Add fallback authentication mechanisms for the case when Kerberos authentication fails.

                            a.      Choose Enable Basic Password Fallback to enable the login modules for authenticating users with a user id and password as a fallback mechanism.

                            b.      Choose Enable SSO with SAP Logon Tickets to enable the login modules for authenticating users with logon tickets as a fallback mechanism.

       3.      Choose Next to proceed to Step 5: Confirmation.

 

Result

The login modules for the chosen fallback mechanisms appear in the configured policy configuration.