Enabling Single Sign-On with Secure Login Client for SAP Business Client

As of SAP NetWeaver Business Client 4.0 administrators can configure this integration in the admin configuration file. When users try to connect to a system for which the Use Secure Login Client setting is activated, SAP Business Client triggers Secure Login Client to create a X.509 certificate.

The Secure Login client exists for Microsoft Windows and Mac OS X operating systems. The windows component provides security protocols and credentials for SAP GUI (SNC, SSF) and Web-based SAP NetWeaver access (SSL). SLC comes with the following optional and complementary end user token support:

Use cases are as follows:

1. Profile with Certificate Request On Demand

   Secure Login Client (SLC) can use authentication mechanisms like user name and password or several other authentication mechanisms like RSA token. Dependent on the Secure Login Server profile the SLC integration of SAP Business Client prompts you to enter your credentials in order to receive a short living user X.509 certificate to skip the Web-based logon process of SAP Business Client.

2. Mobile User

   A mobile user connects to his offline machine and then creates a VPN connection. In this case it is similar to use case 1. The SLC integration of SAP Business Client is able to create a short living X.509 certificate to skip the Web-based logon and grants access to the SAP NetWeaver Application Server.

   The Secure Login Client is installed and configured on your computer. For more information about how to configure the relevant settings for this integration, see the admin configuration file at %PROGRAMDATA%\SAP\NWBC \NwbcOptions.xml.

   For more information, see SAP Library for SAP NetWeaver on SAP Help Portal at http://help.sap.com/nwsso  SAP NetWeaver Single Sign-On 2.0  Secure Login Implementation Guide  Secure Login Client  Secure Login Client Installation .