Kindly ask support for a query received from a cliente regarding the possible single-ign-on implementation scenario using their global solution OKTA for a ECC Onpremise and SAP FIORI Clould, below are the points customer wants to be validade by a specialist:
1. The relationship between SAP environments is performed via a trusted RFC (see reference link).
2. We will use the OKTA platform as a second authentication factor and it will pass the credentials of the authenticated user to the FIORI platform that will use it for communication with the SAP ECC onpremise.
3. Considering that OKTA will use the users of the "AD" of ZURICH.COM as a base, so it would be possible to close the triangulation of the accesses.
This means that the users that are in FIORI have to be the same one that is in the SAP ECC onpremise and there will not be a need for a password because they will use a reliable RFC as mentioned on item 1. Is that feasible?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.