Overview:
For some specific scenarios, the official product documentation explicitly asks for a PSE to be created using the 'sapgenpse' command-line tool. This is not a common procedure since most SAP systems already provide a dedicated program/trans...
Hello, Community Experts
For those who don't know me I'm Filipe Santos, and I'm a Product Support engineer in the ABAP Security Core and SAP Single Sign-On areas.
Last year I've delivered a webinar about single sign-on for Fiori Launchpad, and I...
Hi experts,As explained in my past blog post, we started a project that gather customers and SAP experts to discuss one specific topic in a "virtual" meeting room.The first topic that will be discussed in the Virtual Round Table is: Single Sign-On fo...
Hello SAP Single Sign-On SCN Community,The SAP Single Sign-On is a consolidated security product, and its already in its third release version.Until now, if you face a problem with the SAP Single Sign-On product, the resolution could pass through one...
Hey Community,In the past days I released a SAP Knowledge Base Article addressing the most common memory issue within the Security Audit Log. I have noticed that some consultants are used to load lots of SAL files at once in SM20 (e.g. all SAL files ...
Great blog!
Was a working Proof-of-Concept built? If yes, any documents detailing some of the steps taken?
Conceptually I see how this could work, and the blog does a great job of explaining that. I'm wondering if there is anything on the practical...
Hi Megan,
Thank you for this great initiative! I strongly agree that security monitoring for SAP systems is not a topic that has the necessary attention by the community.
I work mainly with ABAP systems, and besides the well-known (I suppose) trans...
Hi Jordan,You can always check the sapgenpse documentation/help using the "-h" option after the function:$ sapgenpse seclogin -h
Create, display or delete Single Sign-On (SSO) credentials
or alternatively change the PIN/passphrase on a PSE
! Chang...
Hi Bernhard,The SAP Single Sign-On implementation guide contains > SNC Kerberos Configuration https://help.sap.com/viewer/df185fd53bb645b1bd99284ee4e4a750/3.0/en-US/942edf9ffb604cd1ae375a86e3b25c4f.htmlStarting on section "Microsoft Windows Account ...
Hi Giovanni,Are you providing the SNC name in the correct format?Make sure the prefix "p:" is being used. Example:1. Correct SNC name -> p:CN=MYSYSTEM2. Incorrect SNC name -> CN=MYSYSTEMIf you could provide a screenshot of the SNC name being configur...