When you choose the alternative logon order, you can select the logon procedures of your choice, and change the order in which they are checked.
When you use the alternative logon order, you can include or remove the following procedures:
Logon Using HTTP Fields
Logon with SSL Certificate
Logon with SAP Logon/Assertion Ticket
Logon with SAP Assertion Ticket
HTTP Basic Authentication
Logon Using SAP User and Password (RFC Logon)
Logon Using SPNEGO
Logon Using SAML
Logon Using User Data Stored in the Service
You can change the order of the checks to meet your requirements.
If the All Logons flag is set, all logon procedures are checked one by one until a check is successful. If the flag is not set, only the first procedure in the sequence is checked. If it is not successful, an appropriate error appears.
A logon procedure is then only checked when the corresponding logon data is also provided by the HTTP request.
You need SAP NetWeaver Single Sign-On to use the SPNEGO logon procedure.
To define an alternative logon order, proceed as follows:
In transaction SICF, call the required service or service node.
If you define the logon order in a service node, the settings are passed on to all services under this node, unless different data has been entered for them.
Choose Change.
Under Service Data/Logon Procedure, choose Alternative Logon Order. The Logon Order tab appears on the service maintenance screen.
Choose the Logon Order tab.
Select any logon procedures that you do not want to use, and remove them from the selection by choosing Delete Line.
Enter numbers to specify the order in which you want the checks to run.
If you want to go back to the standard logon order, choose Restore.
Once you have defined the defined the procedures you want to use and the order of the checks, choose Save.
If you want all selected logon procedures to be checked until a logon is successful, go to the Service Data tab and select the All Logons flag.
Save your entries.