Prerequisites for Using Windows NTLM Authentication (SAP Library

Prerequisites for Using Windows NTLM Authentication

When using the Windows NTLM authentication as the external authentication mechanism, your system must meet the following requirements:

The ticket-issuing application server must be at least Release 4.6D, patch level 317.

The ticket-issuing system’s ITS must be at least Release 4.6D C4.

The Web server must be a Microsoft Internet Information Server (IIS).

The Web server must be configured for using Windows NTLM authentication mechanism. See Configuring Windows NTLM Authentication on the Web Server.

The user’s frontend clients must either reside in the same Windows NT domain as the Web servers, or the domains must trust each other.

The user’s Web browser must be a Microsoft Internet Explorer.

SNC is required between the AGate and the ticket-issuing application server.

Recommendation

Because the user authentication takes place on the Web server, we also recommend using SNC for the connection between the WGate and the AGate if the ITS installation is a dual host installation.

We also recommend using SNC for the connections to systems that accept logon tickets.