User Authentication and Single Sign-On

Feature	Type of Change	Description
Certificate enrollment with the SAP Trust Center Service	New	By activating this feature, users can automatically get a client certificate from the SAP Trust Center Service at initial logon, called the SAP Passport. With this client certificate, they can then log on to SAP (or other) applications that support X.509 client certificate logon. More information: Using SAP Passports Provided by the SAP Trust Center Service This feature is already available with AS ABAP.
New logon application	New	There is a new logon application for SAP NetWeaver Application Server (AS) Java, that replaces the old logon application. This new application includes two new branding images that replace the old branding images in the SAP namespace. The new application also changes the layout of the logon application. More information: Logon Screen Customization.
Single Sign-On Wizard	Enhanced	The wizard allows the users to configure Single Sign-On with SAP logon tickets. Entirely replaces the need of manual SSO configuration. Adding a trusted system which is not in the System Landscape Directory (SLD). Improved error handling. More information: Configuring the AS Java to Accept Logon Tickets
Authentication tool of the SAP NetWeaver Administrator	Enhanced	Enhancement of the Authentication part of the SAP NetWeaver Administrator. You can now edit several UME properties (in the Properties tab page), related to authentication and logon screen without the need of restarting the AS Java. So far these properties were only accessible in the Config Tool.
SPNego wizard	Enhanced	A new user resolution mode for SPNego configuration is introduced: kpnbased. More information: Configuring the UME