Hiding the Secure Login Client

[former_member243947]

Hi,

We have recently implemented the NW SSO 2.0 with Kerberos authentication (without Secure login server). Before we roll this out to end users, we feel if there is an option to hide the Secure login client from being displayed to end users. Many users have admin rights on their PC's and with secure login client we have options to choose the  different certificates for SAPGUI to use for SSO. We basically want to use kerberos token to use for SSO to SAP systems but want to hide the secure login client to end users.

Can you please let me know if there is any options doing it?

Thanks

Thilip Kumar

[Former Member · Accepted solution]

You may also try to hide icon with registry key

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\SAP\SecureLogin\common]

with parameter HideTrayIcon value "1".

Best regards,

Adrian

[annaeymnd · Accepted solution]

Is there any possibility to open the SLC UI when the tray Icon is hidden?

Use case: Normaly the users shouldn't see anything about the SLC.

In exceptional cases it might be nessesary/helpful for an Administrator/power user to log on SAP GUI within  another users session.

Can the UI be started another way?

[Former Member · Accepted solution]

call "sbus.exe /gui" , it will reveal the UI

[former_member243947]

Thanks David and Adrian!

[davefitzgibbon]

Hello Thillip,

You can achieve this by adding the following to the Windows Registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\SAP\SecureLogin]
"TokenType"="kerberos"
"TokenTypeChangeable"=dword:00000001

This will mark the "Kerberos Token" as the default for SAP applications.

Regards,

David