Configuring SNC on the WGate (SAP Library - Pluggable Authentication Services for External Authentication)

Configuring SNC on the WGate

Use

Use this procedure to configure SNC on the WGate for the connection between the WGate and the AGate.

Prerequisites

You have obtained the external security product to use for SNC.

You know the SNC names for the AGate and the WGate. The naming convention is determined by the security product used for SNC.

Note

If the WGate connects to multiple AGate instances, then note the following:

If you use SNC for one of the WGate ß à AGate connections, then you must use SNC for all of the WGate ß à AGate connections specified in the WGate’s configuration file.
The WGate’s security environment and the SNC name must be the same for all of these connections.

Procedure

Proceed as described below.

Caution

The changes made in the following procedure only take effect after you restart the Web server.

Install the security product.

Set the environment variable SNC_LIB to the path and file name of the security product's library.

Note

As of Release 6.20, use the XML configuration file ITSRegistryWGate.xml that is located in the config sub-directory for the ITS installation. Make the entry in the - <key name="Envars"> block.

Prior to Release 6.20, use the WGate configuration file wgate.conf. Make the entry in the <global> section using the setenv parameter.

Establish the security environment for each of the components and perform any other product-specific tasks. For example, the component may have to log on to the security product under its own security environment. For more information, see the product's documentation.

In the WGate configuration file, specify the following parameters:

Parameter	Value
Type	2: Use NISNC based connection (SAP protocol NI plus SNC)
SncNameAGate	SNC name of the AGate and ITS Manager
SncNameWGate	SNC name of the WGate

Note

As of Release 6.20, use the XML configuration file ITSRegistryWGate.xml that is located in the config sub-directory for the ITS installation. Make the entries in the - <key name="Instances"> block for each of the corresponding AGate instances.

Prior to Release 6.20, use the WGate configuration file wgate.conf. Make the entries in the <instances xxx> block.

Restart the Web server. If you have not already done so, then also restart the AGate.

Result

The WGate can use SNC to communicate with the AGate, provided that the AGate has also been configured for using SNC.

See also:

SNC User’s Guide

Using the SAP Cryptographic Library for SNC

ITS Administration Guide

Release 6.20: WGate Configuration

Prior to Release 6.20: WGate Configuration à WGate Configuration File