Microsoft Active Directory Integration

[former_member397702]

Hi experts

We have two issue for our customer:

1-Integration of SAP User Administration into Microsoft Active Directory: Our customer wants to synchronize their SAP users and passwords with Microsoft Active Directory but they dont want to use Single Sign-on.

2-Creating and Synchronize Users in Active Directory from Employee Data Stored in SAP HR

We found two document related with this issue but their version is very old. Is there any new version of this document or we have to use different technology (for example Netweaver Identity Management)?

Related links are:

Best Regards....

[tim_alsop]

Regarding 1. You can use an authentication product so that when a user logs onto the SAP system the SAP system (via the authentication product) is able to check the users password against Active Directory. This is much more secure than using the password hook to synchronise passwords between systems. If you want to you can configure some users to get SSO, whilst others are required to enter their Active Directory password each time they logon. Or you might want all users to enter AD credentials.

Thanks

Tim

[Christian_Cohrs1]

Hi Hande,

The Kerberos SNC authentication options available with the product SAP Single Sign-On are documented on help.sap.com .

I'm pretty sure there will be a mode that fits to your scenario.

Best regards,

Christian