User Authentication and Single Sign-On
Authentication on the SAP Web Application Server ABAP
Using Logon Tickets
Configuring the System for Issuing Logon Tickets
Obtaining a Certificate Signed by the SAP CA
Using a Self-Signed Certificate
Changing from a Self-Signed Certificate to a Certificate Signed
Configuring the System to Accept Logon Tickets
Configuring SAP Web AS ABAP to Accept Logon Tickets from Another
Configuring SAP Web AS ABAP to Accept Logon Tickets from the J2E
Protecting User Information
Using X.509 Client Certificates
Configuring the System for Using X.509 Client Certificates
Authentication on the J2EE Engine
Declarative and Programmatic Authentication
Login Modules and Login Module Stacks
Login Modules
Login Module Stacks
Managing Login Modules
Managing Policy Configurations
Authentication Schemes
Authentication Scheme
Changing the authschemes.xml File
Defining an Authentication Scheme
Defining References to Authentication Schemes
Assigning an Authentication Scheme to an iView
Authentication Schemes Shipped with SAP NetWeaver AS Java
Configuring Authentication Mechanisms
Using Basic Authentication (User ID and Password)
Using Client Certificates for User Authentication
Configuring the Use of Client Certificates for Authentication
Modifying Client Certificate Authentication Options
Using Stored Certificate Mappings
Maintaining the User's Certificate Information
Maintaining Certificate Mappings Automatically
Using Rules Based on Client Certificate Subject Names
Using Rules Based on Client Certificate V3 Extensions
Defining Rules for Filtering Client Certificates
Using Client Certificates via an Intermediary Server
Using Security Session IDs for Single Sign-On Between Applicatio
Using Logon Tickets for Single Sign-On
Configuring the Use of Logon Tickets
Adjusting the Login Module Stacks for Using Logon Tickets
Sample Login Module Stacks for Using Logon Tickets
Specifying the J2EE Engine Client to Use for Logon Tickets
Replacing the Key Pair to Use for Logon Tickets
Configuring the J2EE Engine to Accept Logon Tickets
Testing the Use of Logon Tickets
Changing the Login Module Options for Creating Logon Tickets
Configuring SAP Web AS ABAP to Accept Logon Tickets from the J2E
Using Single Sign-On with Resource Adapters
Using SAML Assertions for Single Sign-On
Mapping SAML Principals to SAP J2EE Engine User IDs
Configuring the Use of SAML
Configuring the SAML Parameters
Adjusting the Login Module Stacks for Using SAML
Accessing an Application that Accepts SAML Assertions
Changing the Startup Mode for the SAML Service
The SAML Test Application
Setting Up the SAML Test Application
Using the SAML Test Application
Outbound Partner Parameters Used by the Test Application
Example SAML Mapping Module Used by the SAML Test Application
Using Kerberos Authentication for Single Sign-On
Key Distribution Center Configuration
J2EE Engine Configuration
Importing Kerberos Configuration Files to the J2EE Engine
Configuring J2EE Engine Properties
Configuring the UME
Configuring the UME when Using ADS Data Sources for Kerberos
Configuring the UME when Using Non-ADS Data Sources
Adjusting the Login Module Stacks for Kerberos Authentication
SPNegoLoginModule Configuration Options
Accessing J2EE Engine with Kerberos Authentication
Using Header Variables for User Authentication
Adjusting the Login Module Stacks for Using Header Variables
Configuring Integrated Windows Authentication in the Portal Usin
Installing the IisProxy Module
Testing the IisProxy Module
Configuring the IIS for Integrated Windows Authentication
Adjusting the Login Module Stacks
Using Integrated Windows and User ID/Password Authentication
Using Anonymous Logon to Access the Portal
Configuring Anonymous Logon with Named Anonymous Users
Authentication on the Portal
Single Sign-On in a Complex System Landscape
Scenario: SSO Between Portal, Web Dynpro, and ABAP Systems
Testing That Web Dynpro System Accepts Tickets From Portal
Testing Single Sign-On Between the Portal and the ABAP System
Single Sign-On to Non-SAP Systems and Applications
Using Authentication When Developing J2EE Engine Applications
Authentication for Web Applications Users on the J2EE Engine
Overview of the Login Process in JAAS
Using Login Modules to Protect Web Applications
Example Login Module
Create and Configure a Login Module
Creating a New Java Project
Implementing the Login Module
Setting the Classpath and Compiling the Java Project
Exporting the Login Module Class in a JAR File
Creating a New Library Project
Making Reference to the Security Provider Service
Setting the Classpath to the JAR of the Login Module
Making Reference to the JAR File
Building SDA File
Deploying the SDA to the J2EE Engine
Configuring the Login Module on the J2EE Engine
Configuring the Login Module Usage
Adding a Reference to the Classloader of the Security Provider
Configuring an Application to Use the Login Module
Example Login Module
Login Modules Over HTTP
SAP Specific HTTP Callbacks
Using the HTTP Callback Classes
Changing the User Password
Single Sign-on for J2EE Web Applications
Propagation of Security Principals to Other Containers on the J2
Security Sessions