https://community.sap.com/t5/application-development-and-automation-discussions/sso-solution-for-ecc-6-0-abap-windows/m-p/6904037#M1481797 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>This is one of the most asked questions on this forum (at least it seems like it is because I have lost count of how many times I have answered this question). You just need to search the forum and you will find many questions same being answered.</P><P></P><P>You need to use an SNC library on each workstation running SAP GUI and on each SAP ABAP server. The SNC library will provide the authentication and give you the SSO you are asking for. If users logon to Windows workstation using Active Directory domain, then it is best to use Kerberos so you need an SNC library that uses Kerberos credentials for authenticaiton and network security. The SNC library can be obtained from a SAP Partner, who supports SAP on Windows - some just support SAP on UNIX/Linux. Also, SAP themselves have an SNC library called gsskrb5.dll which you can instll and use which an be done without any costs. The partner products are usually used if you have a mixed server environment or you need additional functionality not included in the SAP library.</P><P></P><P>Thanks,</P><P>Tim</P></BODY></HTML> Mon, 26 Apr 2010 06:53:23 GMT tim_alsop 2010-04-26T06:53:23Z https://community.sap.com/t5/application-development-and-automation-discussions/sso-solution-for-ecc-6-0-abap-windows/m-p/6904036#M1481796 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P></P><P>We are looking for the best solution to configure single sign on for our ECC 6.0 system.</P><P></P><P>Landscape</P><P>ECC 6.0 - ABAP</P><P>BW 7.0</P><P>No - Enterprise Portal.</P><P>Server OS - Windows 2003</P><P></P><P>Users login to SAP system only thru SAPGUI.</P><P></P><P>Requirement:</P><P>-</P><HR originaltext="---------------" /><P>Users has to login to their window nt domain and then when they click their SAPGUI pad entry it should automatically connect them to the ECC 6.0 system, without prompting for a userid / password.</P><P></P><P>Also when the user changes their NT password, their SAP password also has to be changed.</P><P></P><P></P><P>1. What is the best solution can be implemented?</P><P>2. Is there any third party tools involved? which we need to purchase?</P><P>3. Where can we find this kind of documentation?</P><P></P><P>Thanks</P><P>Senthil</P></BODY></HTML> Mon, 26 Apr 2010 03:20:05 GMT https://community.sap.com/t5/application-development-and-automation-discussions/sso-solution-for-ecc-6-0-abap-windows/m-p/6904036#M1481796 Former Member 2010-04-26T03:20:05Z https://community.sap.com/t5/application-development-and-automation-discussions/sso-solution-for-ecc-6-0-abap-windows/m-p/6904037#M1481797 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>This is one of the most asked questions on this forum (at least it seems like it is because I have lost count of how many times I have answered this question). You just need to search the forum and you will find many questions same being answered.</P><P></P><P>You need to use an SNC library on each workstation running SAP GUI and on each SAP ABAP server. The SNC library will provide the authentication and give you the SSO you are asking for. If users logon to Windows workstation using Active Directory domain, then it is best to use Kerberos so you need an SNC library that uses Kerberos credentials for authenticaiton and network security. The SNC library can be obtained from a SAP Partner, who supports SAP on Windows - some just support SAP on UNIX/Linux. Also, SAP themselves have an SNC library called gsskrb5.dll which you can instll and use which an be done without any costs. The partner products are usually used if you have a mixed server environment or you need additional functionality not included in the SAP library.</P><P></P><P>Thanks,</P><P>Tim</P></BODY></HTML> Mon, 26 Apr 2010 06:53:23 GMT https://community.sap.com/t5/application-development-and-automation-discussions/sso-solution-for-ecc-6-0-abap-windows/m-p/6904037#M1481797 tim_alsop 2010-04-26T06:53:23Z