Question:
Hi,
we should to activate SSO for our R/3 47 on Unix-IA64 platform.
The users logon to Sap via Sapgui on CITRIX metaframe, using Win32 frontend.
We should use Kerberos, as it's already implemented on Active Directory side for other different applications.
We read note 138498, and 150380 but we are starting to think is not possible to set-up an SSO experience for the R/3 users.
As we understand there is no free Kerberos software for UNix supported by Sap.
Someone experimented the SSO for Sap on Unix Ia64 platform ? How it can be done ?
Pratically what should be done ?
1) on the Active directory
We read somewhere we have to register the Sap system and create a schema for them....but the docu doesn't says HOW register the R/3 systems or create the so called schema.
Do we have to do it manually ? Are there Sap utility to be installed and executed on the Active Directory server ?
2) On the Unix Sap server
Some Oss note speacks about R/3 instance parameter to be set up, but nowhere i'm able to find an exaustive list of the parameters to be managed for SSO
3) On the Pc Frontentend
Do we have to do something here a part fill-in the flag 'SNC' on the Saplogon for the relevant R/3 instance ?
Regards and thanks in advance
Answer:
If you want help with this environment setup, please contact me, or look at our website (www.cybersafe.ltd.uk/links/sap.htm). Our company has products to address the needs of Secure Single SignOn using Kerberos in a multi-platform environment. The products fro SAP are only for use when SAP server is running on Windows. Our product uses SNC, and we provide the documentation and assistance required to help you configure SNC and achieve your Secure SSO needs.
_________________
Tim Alsop
CyberSafe Limited
"The SAP Secure SSO and Integrated Windows Authentication Experts..."
http://www.cybersafe.com