Benutzerauthentifizierung und Single Sign-On

SAP NetWeaver Single Sign-On

Authentifizierung auf dem AS ABAP

Verwendung von Anmeldetickets

System für das Ausstellen von Anmeldetickets konfigurieren

System für das Akzeptieren von Anmeldetickets konfigurieren

SAP Web AS ABAP für das Akzeptieren von Anmeldetickets eines SAP

Configuring SAP Web AS ABAP to Accept Logon Tickets from the J2E

Schutzmaßnahmen für Benutzerdaten

Verwendung von X.509-Client-Zertifikaten

System für die Verwendung von X.509-Client-Zertifikaten konfigur

Vom SAP Trust Center Service ausgestellte SAP Passports verwende

System für Verwendung des SAP Trust Center Service konfigurieren

Authentication for Web Services

HTTP Transport Level Authentication

SOAP Message Level Authentication

SAML-Token-Profile

WS-Security UsernameToken

Authentication on the AS Java

Declarative and Programmatic Authentication

Login Modules and Login Module Stacks

Login Modules

Login Module Stacks

Managing Login Modules

Managing Policy Configurations

Authentication Schemes

Authentication Scheme

Changing the authschemes.xml File

Defining an Authentication Scheme

Defining References to Authentication Schemes

Assigning an Authentication Scheme to an iView

Authentication Schemes Shipped with SAP NetWeaver AS Java

Configuring Authentication Mechanisms

Using Basic Authentication (User ID and Password)

Using Client Certificates for User Authentication

Configuring the Use of Client Certificates for Authentication

Modifying Client Certificate Authentication Options

Using Stored Certificate Mappings

Maintaining the User's Certificate Information

Maintaining Certificate Mappings Automatically

Using Rules Based on Client Certificate Subject Names

Using Rules Based on Client Certificate V3 Extensions

Defining Rules for Filtering Client Certificates

Using Client Certificates via an Intermediary Server

Using Security Session IDs for Single Sign-On Between Applicatio

Using Logon Tickets for Single Sign-On

Configuring the Use of Logon Tickets

Adjusting the Login Module Stacks for Using Logon Tickets

Sample Login Module Stacks for Using Logon Tickets

Specifying the J2EE Engine Client to Use for Logon Tickets

Replacing the Key Pair to Use for Logon Tickets

Configuring the J2EE Engine to Accept Logon Tickets

Checking or Updating the Certificates of Trusted Systems

Exporting the Ticket-Issuing Server's Public-key Certificate

Testing the Use of Logon Tickets

Changing the Login Module Options for Creating Logon Tickets

Configuring SAP Web AS ABAP to Accept Logon Tickets from the J2E

Using Single Sign-On with Resource Adapters

Using SAML Assertions for Single Sign-On

Mapping SAML Principals to SAP J2EE Engine User IDs

Configuring the Use of SAML

Configuring the SAML Parameters

Adjusting the Login Module Stacks for Using SAML

Accessing an Application that Accepts SAML Assertions

Changing the Startup Mode for the SAML Service

The SAML Test Application

Setting Up the SAML Test Application

Using the SAML Test Application

Outbound Partner Parameters Used by the Test Application

Example SAML Mapping Module Used by the SAML Test Application

Using Kerberos Authentication for Single Sign-On

Key Distribution Center Configuration

Configuring the UME

Configuring the UME when Using ADS Data Sources for Kerberos

Configuring the UME when Using Non-ADS Data Sources

Wizard-based Configuration for Kerberos Authentication

Step 1: Prerequisites

Step 2: Kerberos Realm

Step 3: Resolution Mode

Step 4: Policy Configuration

Step 5: Confirmation

Troubleshooting

Accessing AS Java with Kerberos Authentication

Using Header Variables for User Authentication

Adjusting the Login Module Stacks for Using Header Variables

Using Anonymous Logon to Access the Portal

Configuring Anonymous Logon with Named Anonymous Users

Authentication on the Portal

Single Sign-On in a System Landscape

SSO Between Portal, Web Dynpro, and ABAP Systems

Testing That Web Dynpro System Accepts Tickets From Portal

Testing Single Sign-On Between the Portal and the ABAP System

Single Sign-On für Web-Services

Verwendung der Authentifizierung auf Transportebene

Verwendung der Authentifizierung auf Nachrichtenebene

Nachrichtenbasierte Authentifizierung mit WS-Security

SSO mit SAML-Token-Profilen konfigurieren

SAML-Token-Profil ausstellenden WS-Konsumenten AS ABAP vorbereit

Zertifikat des AS ABAP exportieren

WS-Anbieter AS ABAP für das Akzeptieren von SAML-Token-Profilen

Vertrauensbeziehung für SAML-Token-Profile ohne Anmeldeticketkon

Inhaberbestätigungsmethoden für SAML-Token-Profile

Single Sign-On to Non-SAP Systems and Applications

Using Authentication When Developing J2EE Engine Applications

Authentication for Web Applications Users on the J2EE Engine

Overview of the Login Process in JAAS

Using Login Modules to Protect Web Applications

Example Login Module

Create and Configure a Login Module

Creating a New Java Project

Implementing the Login Module

Setting the Classpath and Compiling the Java Project

Exporting the Login Module Class in a JAR File

Creating a New Library Project

Making Reference to the Security Provider Service

Setting the Classpath to the JAR of the Login Module

Making Reference to the JAR File

Building SDA File

Deploying the SDA to the J2EE Engine

Configuring the Login Module on the J2EE Engine

Configuring the Login Module Usage

Adding a Reference to the Classloader of the Security Provider

Configuring an Application to Use the Login Module

Example Login Module

Login Modules Over HTTP

SAP Specific HTTP Callbacks

Using the HTTP Callback Classes

Changing the User Password

Single Sign-on for J2EE Web Applications

Propagation of Security Principals to Other Containers on the J2

Remote Authentication

Security Sessions