About Christian_Cohrs

Christian_Cohrs

SAP Secure Login Service for SAP GUI allows customers to benefit from secure authentication based on multiple factors, while at the same time improving productivity and end-user satisfaction through single sign-on. Most customers configure the soluti...

Christian_Cohrs

Access to the administration console of SAP Secure Login Service for SAP GUI is managed using identity provider groups. With the latest enhancements, we give customers the flexibility to define their own custom group names for this purpose, in additi...

Christian_Cohrs

You have all heard that change is the new normal. This is true in many ways, including for IT security. Whether it is the cryptographic algorithm, the key length, or an individual key, we must always be ready to change to something “better”, namely m...

Christian_Cohrs

We have recently released new capabilities for the Identity Provisioning service, SAP’s solution for identity lifecycle management in the cloud. As part of this release we added a connector for SAP S/4HANA On-Premise. This connector allows customers...

Christian_Cohrs

We have recently released new capabilities for the Identity Provisioning service, SAP's solution for identity lifecycle management in the cloud. As part of this release we added a connector for SAP Marketing Cloud, which allows customers to use this...

Christian_Cohrs

Hi Nelis,We have the configuration parameter "allowBrowserSSO" that can be used to run the built-in browser of Secure Login Client in a private mode. You could try if this is enough to prevent the Entra Id logon page from picking up any existing toke...

Christian_Cohrs

Hi Peter,the license is based on persons, same as the SAP Single Sign-On product. So you would need 16 blocks.Best regards

Christian_Cohrs

It is possible to configure the ABAP system in such a way that SNC names coming from the Kerberos token and the X.509 certificate can be aligned. That way, they both fit the su01 definition. You will find details in the "Name Alias" section of this p...

Christian_Cohrs

@sam_venkat Yes, you can use both technologies in parallel. The token type can be specified for each system and also on the user level.

Christian_Cohrs

Yes, SAP Cloud Identity's Identity Authentication Service can help with both of these things:Configure the Subject Name Identifier Sent to the Application Convert Subject Name Identifier to Uppercase or Lowercase

User Statistics

User Activity

Enforce a secure re-authentication for each new SAP GUI connection, with SAP Secure Login Service

Simplified access to the administration console of SAP Secure Login Service for SAP GUI

Supporting crypto agility with the BTP Trust Store

SAP Cloud Platform Identity Provisioning: New capabilities in April 2019

SAP Cloud Platform Identity Provisioning: New capabilities in January 2019

Re: Enforce a secure re-authentication for each new SAP GUI connection, with SAP Secure Login Servic

Re: Exploring SAP Secure Login Service for SAP GUI: A Comprehensive Review

Re: SAP Secure Login Service for SAP GUI Now Available

Re: SAP Secure Login Service for SAP GUI Now Available

Re: SAP GUI MFA with Microsoft Entra (Part I): Integration with SAP Secure Login Service