Question Re: Delegate authentication in Technology Q&A

Delegate authentication

Former Member — Thu, 17 Jan 2013 16:43:40 GMT

Hi,

Delegated authentication is possible in SAP? In this case how work this type of autenthication?

I have a problem with portal authentication, if the ticket returned is from an unknown domain for the UME, we want to know if the delegated authentication can generate a new ticket against a trusted domain unknown,.this now not occur, is possible to combine two authentication mechanisms as Kerberos and User/Password?

Thanks!!

Re: Delegate authentication

LJB — Thu, 17 Jan 2013 22:42:40 GMT

Move from KMC discussion area.

SAP moderator.

Re: Delegate authentication

Former Member — Fri, 18 Jan 2013 02:52:56 GMT

I have hard time understanding what you have written but I will answer to the part I do understand. Yes, you can setup SPNEGO as the primary authentication method and define basic authentication as a fallback method.

Re: Delegate authentication

Former Member — Fri, 18 Jan 2013 10:20:26 GMT

Hi,

Thanks for wour answer and sorry because my explanation is confusing.

Are two questions:

1. What is the delegate authentication in SAP? I have been looking for information but it is unclear.

2. If the UME of our SAP portal does not recognize the domain of logon ticket. We wanted to automatically request user and password but this does not happen.
What can be causing this problem?

Regards

Re: Delegate authentication

Former Member — Fri, 18 Jan 2013 16:40:25 GMT

Answer to question 1 is that delegate authentication can mean just about anything. If interpreted generally, it could mean that SAP uses external authentication. That can be SPNEGO (Kerberos), SAML, any external system issuing a Logon Ticket which is then verified by SAP, etc.

Answer to question 2 is that I can't answer it without more details. You will have to share the technical details of your setup, including configuration and screenshots. Generally speaking I assume your LoginModule is incorrectly configured meaning you are not providing a fallback.