Delegate authentication

[Former Member]

Hi,

Delegated authentication is possible in SAP? In this case how work this type of autenthication?

I have  a problem with portal authentication, if the ticket returned is from an unknown domain for the UME, we want to know if the delegated authentication can generate a new ticket against a trusted domain unknown,.this now not occur, is possible to combine two authentication mechanisms as Kerberos and User/Password?

Thanks!!

[Former Member]

I have hard time understanding what you have written but I will answer to the part I do understand. Yes, you can setup SPNEGO as the primary authentication method and define basic authentication as a fallback method.

[Former Member]

Hi,

Thanks for wour answer and sorry because my explanation is confusing.

Are two questions:

1. What is the delegate authentication in SAP? I have been looking for information but it is unclear.

2. If the UME of our SAP portal does not recognize the domain of logon ticket. We wanted to automatically request user and password but this does not happen.
What can be causing this problem?

Regards

[Former Member]

Answer to question 1 is that delegate authentication can mean just about anything. If interpreted generally, it could mean that SAP uses external authentication. That can be SPNEGO (Kerberos), SAML, any external system issuing a Logon Ticket which is then verified by SAP, etc.

Answer to question 2 is that I can't answer it without more details. You will have to share the technical details of your setup, including configuration and screenshots. Generally speaking I assume your LoginModule is incorrectly configured meaning you are not providing a fallback.

[LJB]

Move from KMC discussion area.

SAP moderator.