Logon Ticket
Definition
The logon ticket is a piece of information used as an authentication token for access to SAP (or non-SAP) systems.
Use
The logon ticket is issued to a user when he or she logs on to the issuing server in the system landscape. It is then sent to the accepting systems when the user accesses the various services. The accepting systems verify the validity of the logon ticket before allowing the user access to the system‘s services.
Before the issuing server creates a logon ticket for a user, the user must provide his or her authentication information (that is, user ID and password). Afterwards, the logon ticket is used to allow the access to the various systems and no further user ID and password entries are necessary.
Structure
The logon ticket contains the following information:
The logon ticket is only available for a designated length of time (default = 60 hours). You can define the expiration period for the ticket in the parameter
(See SAP Note 337794 for information about how to set the expiration time in minutes.)
The issuing server‘s digital signature is verified by the accepting system when the user accesses the corresponding service. The digital signature guarantees that the issuing server issued the logon ticket to the user and that the contents have not been changed.