SETUP SECURE LOGIN CLIENT AND LOGIN USING KERBEROS TOKEN [LINKED] #ATR

[AJAYTR_ATR66]

#ATR(8)    [LINKED]

This blog is linked with "SINGLE SIGN ON CONFIG - USING SINGLE SNC NAME TO SUPPORT BOTH X.509 CERTIFICATE AND KERBEROS TOKEN LOGON.

Link: https://community.sap.com/t5/technology-blogs-by-members/single-sign-on-config-using-single-snc-name...

Informative Note: Created this blog to provide information on how to setup Secure Login Client and Login using Kerberos token.

KERBEROS LOGON STEPS

 1) Install SLC Software

•      You can download Secure Login Client from SWDC. Install on your PC.

•      Once installed, SLC will be visible in taskbar tray icon. Click ‘Show’ button and open SLC.

2) Select Kerberos token for SAP Application                         [Log in… Optional]

3) Add/Change SAP GUI Properties

•     Provide your corresponding system details as usual in SAP LOGON GUI – NEW CONNECTION.

  4) In Network settings, Provide below mentioned information

•        Checkbox: Activate Secure Network Communication
•        SNC name: p:CN=SID SID – System ID
•        Security: Maximum Security Settings available [As per User Convenience]
•        Connection: High Speed (LAN)

• Select ‘OK’ and close properties.
• No need to change anything in “Code Page” tab.
• Now, Users can login system with/without password as per user convenience.

• Users will be logged in directly to client which they have access.
• If Users have access to multiple Clients in system, they can select and choose client to login as per their requirement.

• Selected Client – 100 (For Example)
• User logged on Client 100 (SNC - Without Password using Kerberos token)
• Message: SNC logon by 100 USERID for p:CN=USERNAME@WINDOWSDOMAIN

Note: Make sure SNC Canonical saved in ABAP System [as same as Windows Domain ID] before logging in.

Thanks for Visiting !
Please do connect and follow my Linked In Profile - https://www.linkedin.com/in/ajaytr66/

AJAY TR - ATR - SAP BASIS ADMINISTRATOR

[Adithya1]

Hi @AJAYTR_ATR66,

Is the Secure Login Client tool a licensed one? 

[AJAYTR_ATR66]

Hi Adithya1,

   Yes. Single Sign On is licensed. If Single Sign On Software available in your Customer SWDC then you already have license to download and use SSO.

Regards,

Ajay TR,

SAP BASIS Administrator.

[Pratheesh1]

Hello experts,

I'm inquiring whether it's feasible to incorporate a new Active Directory (AD) domain, distinct from the one I'm currently logged into, within the SAP Secure Login Client.

As consultants, we operate within our company's domain. However, since we're providing support to our client, who operates within a separate domain, we need to ensure that we can access their SAP Systems using Single Sign-On (SSO). Unfortunately, this isn't possible due to the disparity between our domain and the client's domain. Therefore, we're exploring the option of integrating the client's domain into our SAP Secure Login Client.

FYI, we use VPN to connect to our client systems.

Thank you