Single Sign-On to SAP Systems 

This section summarizes the different scenarios for Single Sign-On to SAP Systems. Which method of Single Sign-On (SSO) you use with a SAP System depends on various parameters, such as the release of the system. There are different prerequisites, for example, users must have the same user ID in all SAP Systems that are accessed via SSO with SAP logon tickets.

The following diagram helps you find out which method of Single Sign-On to use with a specific SAP System.

Scenario 1: Single Sign-On using SAP logon tickets without user mapping

Users must have the same user IDs in all SAP systems that are accessed via SSO with SAP logon tickets. If the SAP user IDs are the same as the portal user IDs, user mapping is not required. You need to perform the following steps:

...

       1.      Configure Portal Server for SSO with SAP Logon Tickets

       2.      Configure SAP Systems to Accept and Verify SAP Logon Tickets

 

Scenario 2: Single Sign-On using SAP logon tickets with user mapping

If users have different users IDs in the SAP Systems than in the portal, you must define a SAP reference system and map each user's user ID to their user ID in the reference system. You must perform the following steps:

...

       1.      Define an SAP Reference System for User Data

       2.      Configure Portal Server for SSO with SAP Logon Tickets

       3.      Configure SAP Systems to Accept and Verify SAP Logon Tickets

       4.      (Optional) You can choose to store and retrieve mapped user IDs from an attribute in your LDAP directory. For details on how to set this up, see Using an LDAP Directory Attribute as the ABAP User ID.

       5.      Users or administrators must map portal user IDs to user IDs in the SAP Reference System as described in User Mapping.

 

Scenario 3: Single Sign-On using user ID and password with user mapping

There are two cases where you would use this method of Single Sign-On:

·        The SAP System has release 3.1I.

·        Users have a different user ID in the SAP System in question than in the reference SAP System used for logon tickets.

You must perform the following step: Configuring SSO with User ID and Password to SAP Systems.