The SAP GUI's Single Sign-On (SSO) functions enable you to configure transparent user authentication for access to AS ABAP systems.
With SSO, SAP GUI users can only select the AS ABAP system to log on to from the SAP Logon Pad, without needing to interactively provide a user name and a password.
You can use the SSO functions of the SAP GUI to facilitate user access to multiple AS ABAP systems in an SSO environment. In addition, the use of SSO can reduce your administration costs, while strengthening the overall security of your systems.
We recommend that you use Secure Login of SAP Single Sign-On to enable users to access SAP GUI on their client PCs.
In this scenario, you cannot use SNC Client Encryption.
We recommend that you use Secure Login of the SAP Single Sign-On product to enable users to access SAP GUI on their client PCs. SAP Single Sign-On centralizes and greatly simplifies the way users log on to systems and applications in your IT landscape. Seamlessly integrated into your existing authentication processes, SAP Single Sign-On offers enhanced security through state-of-the-art technology. You can reduce your operating costs by eliminating password-related helpdesk calls, and improve user productivity.
For more information, see SAP Single Sign-On.
The SAP Logon Pad is installed on client computers. SAP GUI users that are enabled to use SSO can access AS ABAP systems by selecting them from the SAP Logon Pad.
Use the SAP Cryptographic Library for authentication mechanisms that use cryptographic functions. For more information, see SAP Note 1848999 .
For more information about configuring the AS ABAP authentication mechanisms for SSO when logging on from the SAP GUI, see the following topics:
Information about configuring provided security mechanisms when using logon with a user ID and password, for example from an SAP shortcut.
Single Sign-On for SAP Shortcuts
Information about configuring SSO between a portal and an SAP shortcut.
Single Sign-On with Client Certificates
Information about the configuration steps to enable SAP GUI logon with client certificates
Single Sign-On with Microsoft Kerberos SSP
Information about the configuration steps to enable Kerberos authentication for the SAP GUI
Single Sign-On with Microsoft NT LAN Manager SSP
Information about the configuration steps to enable NTLM authentication for the SAP GUI