Showing results for 
Search instead for 
Did you mean: 

Portal and Ldap windows authentication

Former Member
0 Kudos

hello to all.

I need to configure portal with "windows authentication"

so that he/she only requests the windows key and he/she can enter directly to the portal.

My windows system 2003 have ldap (active directory).

Do I need KERBEROS???

or alone it is enough to associate the server ldap in portal


hola a todos .

Necesito configurar portal con "windows authentication"

para que solamente solicite la clave de windows y pueda entrar directamente al portal.

Mi sistema de windows 2003 tiene ldap.

¿¿ Necesito KERBEROS ???

o solo es suficiente asociar el servidor ldap en portal


Cristian Nazar

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Cristian,

Check out

Hope this helps.



Answers (3)

Answers (3)

Former Member
0 Kudos

thanks to all

they responded my doubt.

gracias a todos

sus respuestas aclaran mis dudas.


Cristian Nazar

Former Member
0 Kudos

Dear Nazar,

I have recently completed the Configuration of Windows 2003 Active Directory with SAP Enterprise Portal 6.0 SP15.

Install Windows 2003

Install directory services.

Install IIS

Install Microsoft CA

Download the root certificate from Windows

upload the root certificate into the portal using Visual Admin

restart the portal

configure UME to use MS AD as the User Store, on port 636.

incase u have any problems then feel free to write to me Glenn.Mendonca[at]



Former Member
0 Kudos

Dear Glenn,

Your implementation use the SPNego login Module???



Former Member
0 Kudos

Hello Glenn,

I have installed EP 6.0 SP 9 & done with integrated windows SSO using IIS proxy. (single domain)

Now I am looking at configuring it for multiple domains?

**Do you have any idea how this can be achieved ?

**Also would like to know how you did it using "Install Microsoft CA", do we need to purchase any licenses from Microsoft for same ?


Sunil Kulkarni

Former Member
0 Kudos

Unfortunately IISPROXY is not supported after January 2006.

Yes, you do need to use Kerberos authentication for Intergrated Windows Authentication.

Your 2003 AD comes standard with Kerberos Ticket Issuing services and your domain controller can also function as a KDC (Kerberos Key Distribution Centre)

Hope this helps