!--a11y-->
Authentication on the SAP Web Application
Server ABAP 
The SAP Web Application Server ABAP supports the following user authentication and Single Sign-On mechanisms:
User Authentication and Single Sign-On Mechanisms
Mechanism |
Description |
User ID and password |
Default mechanism to use for user authentication for both SAP and Internet protocols, regardless of the frontend client. |
Secure Network Communications (SNC) |
Use for user authentication and Single Sign-On when using SAP protocols (dialog, RFC) and the SAP GUI for Windows or SAP GUI for Java as the frontend clients. Transport layer security is also provided when using SNC. For more information, see the SNC User’s Guide on the SAP Service Marketplace. |
SAP logon tickets |
Use for Single Sign-On when using Internet protocols and a Web browser as the frontend client. See Using Logon Tickets. |
SSL and X.509 client certificates |
Use for both user authentication and Single Sign-On when using Internet protocols and a Web browser as the frontend client. |
Pluggable Authentication Services (PAS) |
Available as a service with the Internet Transaction Server (ITS). The user is issued a logon ticket after being authenticated by an external authentication mechanism. See Pluggable Authentication Services for External Authentication. |