Showing results for 
Search instead for 
Did you mean: 

Problem set-up Single Sign-On using Kerberos

0 Kudos

Hi All,

We are getting problem when we configure SSO in our system.

Please find the below steps we did in the system

1) Created ZA domain user at OS level and Oracle level (xxxsvc-013ds5)

2) Downloaded (from OSS Note 352295). Unzip it and placeed the kerberos file on C:\WINDOWS\SysWOW64\gx64krb5.dll

3) Below SNC parameters created at SAP instance profile

snc/identity/as                             p: xxxsvc-013ds5@ZA.xx.yyyy.NET

snc/gssapi_lib                              C:\WINDOWS\SysWOW64\gx64krb5.dll

snc/permit_insecure_start                   1

snc/data_protection/min                     1

snc/data_protection/max                     1

snc/accept_insecure_rfc                     1

snc/accept_insecure_gui                     1

snc/accept_insecure_cpic                    1

snc/force_login_screen                      1

snc/enable                                  1

4) We are not able to start SAP when we changed Log On AS of SAPDS5_00 service from SAPserviceDS5 to ZA domain user and getting the below error. 

5)We revert back the SSO parameter settings and changed Log On AS of SAPDS5_00 service from ZA domain user to SAPserviceDS5.  We started SAP and DB services system without any issue. Now the system is up and running fine without SSO configuration.


Please correct me if i did any mistake in the above steps and help me to resolve this ASAP.



Accepted Solutions (0)

Answers (1)

Answers (1)

Active Contributor
0 Kudos


Kindly refer the SCN link