Wednesday, October 24, 2012

How To: Setup SSO Using SAP Secure Login Library and Kerberos

 

Secure Login Library is one of the component SAP NetWeaver Single Sign-On product from SAP. Secure Login provides strong encryption, secure communication, and single sign-on between a wide variety of SAP components.

Secure Login allows you to benefit from the advantages of SNC (Secure Network Communications) without the need to setup a Public Key Infrastructure (PKI) and which in turn can also pass calls through the Secure Login Library to encrypt all communication between the SAP GUI and SAP Server, thus providing secure single sign-on to SAP..

Secure Login allows users to authenticate via one of the following authentication mechanisms:

  1. Windows Domain (Active Directory Server)
  2. RADIUS Server
  3. LDAP Server
  4. SAP NetWeaver Server
  5. Smartcard Authentication

It also provides single sign-on for web browser access to the SAP Portal (and other HTTPS-enabled Web applications) via SSL.

Three Main Components:

Secure Login Server
Secure Login Library
Secure Login Client

10-24-2012 10-49-27 AM

 

As of Sept 2012 Secure Library Supported Platforms:

Windows Server 2003 x64 64Bit
Windows Server 2008 x64 64Bit
Windows Server 2008 R2 x64 64Bit
AIX 5.2, 5.3, 6.1, 7.1 Power 64Bit
HP-UX 11.11, 11.23, 11.31 PA-RISC 64Bit
HP-UX 11.23, 11.31 IA64 64Bit
Solaris 9, 10 SPARC 64Bit
Solaris 10 x64 64Bit
Linux SLES 9, 10, 11 IA64 64Bit
Linux SLES 9, 10, 11 x86_64Bit
Linux SLES 9, 10, 11 Power 64Bit
Linux RHEL 4, 5, 6 IA64 64Bit
Linux RHEL 4, 5, 6 x86_64Bit
Linux RHEL 4, 5, 6 Power 64Bit
OSF1 5.1 Alpha 64Bit
Mac OS X 10.5 Universal 96 (32Bit / 64 Bit)

 

High Level Summary of the Tasks Required:

  1. Install Secure Login Library SAP AS ABAP/Java
  2. Secure Login Library Configuration (multiple options, choose per your requirement/landscape)
    1. SNC X.509 Certificate
    2. SNC Kerberos
  3. Install (or bundle with SAPGUI install) Secure Login Client for the end-users.

For detailed step-by-step instructions, please refer to SAP NetWeaver SSO Configuration Guide.

References/SAP Notes:

SAP NetWeaver SSO Configuration Guide
SAP Note: Microsoft Windows Single Sign-On options

Secure Configuration of SAP NetWeaver Application Server Using ABAP
Single Sign-On between SAP Portal and SuccessFactors

Provides general information before you start the implementation Video 1/5
Installation and configuration of Secure Login Server Video 2/5
Installation and configuration of Secure Login Client Video 3/5
Installation and configuration of Secure Login Library Video 4/5
Configuration of user mapping information in SAP NetWeaver Application Server ABAP and Java systems Video 5/5

No comments:

Post a Comment

Recommended Readings