Question Re: Certificate based logon for Cloud application in Technology Q&A

Certificate based logon for Cloud application

former_member190457 — Wed, 08 May 2013 16:42:23 GMT

Hi all,

I'm developing a Cloud application deployed as a .war where I'd like to specify Certificate-based logon for all users.

From https://help.hana.ondemand.com/help/frameset.htm?e637f62abb571014857cb0232adc43a7.html I understand that this is not possible.

Is that right or anyone has a workaround/solution?

Thanks, regards

Vincenzo

Re: Certificate based logon for Cloud application

Vlado — Wed, 08 May 2013 17:21:41 GMT

Hi Vincenzo,

Not exactly. You can specify CLIENT-CERT and it will work just as described for FORM, i.e. it will make a corresponding SAML2 request to the SAP ID service (or your custom identity provider if you have configured such).

Cheers,

--Vlado

Re: Certificate based logon for Cloud application

former_member190457 — Thu, 09 May 2013 09:47:11 GMT

Hi Vlado

thanks for your help.

I would like users to login only with a certificate, so without typing user and password.

I'm browsing the docs for the FORM authentication to understand what it actually does.

Do you know if certificate based auth is possible?

Thanks,

Vincenzo

Re: Certificate based logon for Cloud application

Vlado — Thu, 09 May 2013 16:00:11 GMT

Can you please provide some more details about your scenario? Which certificates would they use? Who is the issuer of the certificates?

Basically, the solution depends on whether SAP ID service knows about it and can validate the certificate and authenticate the user, or not.

Cheers,

--Vlado

Re: Certificate based logon for Cloud application

former_member190457 — Thu, 09 May 2013 16:04:16 GMT

Hi Vlado,

I am an SAP colleague, I'd like users with SAP I/D/C-user certificate to logon without typing their user/pwd.

Can that be done? Please feel free to contact me privately by mail if you wish so.

Your help is much appreciated.

Thanks, Vincenzo

Re: Certificate based logon for Cloud application

Vlado — Thu, 09 May 2013 16:18:34 GMT

Then it's easier. Just specify CLIENT-CERT in the web.xml and you are done.

SAP ID service will prompt the user for the certificate and will authenticate him/her after successful validation.