SNC Kerberos Registry settings for mass user update

[SAPSupport]

Hello Team,

We are migrating from SAP NW SSO server to use SNC Kerberos for SAP GUI SSO.

We need to set favorite for all the users to Use profile for SAP application to Kerberos.

Can you please suggest the registry entries for these settings, so they can be pushed from group policy level.

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

In order to achieve automatic selection of Kerberos profile for SSO, you can refer following solution given in the KBA 3086403 - Selecting a Default Secure Login Client Profile For SAP Application Via Registry-Based Group Policy

Resolution

The use of the "GssTargetName" setting may be made in that regard, since depending on it's value and the application's context, a specific profile will be selected over others.

For that end, Microsoft group policies must be used to deploy this configuration.

To configure a connection preference for Kerberos/MS CAPI one should follow the description present in the following SAP Help document.

If Secure Login Server profile is used to enroll for the user certificate, then refer to the following SAP Help document to configure group policies.

In the following SAP Help document, the different values for "GssTargetName" are evidenced.