Single Sign-on for SAPIncrease the Security, Privacy and Compliance of Your SAP DataVintela Authentication Services SAP BC-SNC Certified Single Sign-on for SAP Solution Enables Unique Security Capabilities for SAPgui applications
Single Sign-on for SAP
Active Directory (AD) provides a true single sign-on environment for Windows resources. Through its use of the industry standards Kerberos and LDAP, AD provides a compliant, secure and scalable infrastructure for authentication, authorization and access. For users of SAP on Unix systems, Vintela Authentication Services from Quest Software provides the same capability. It allows Unix and Linux systems to “join” the AD domain, which extends the compliant and secure AD-based authentication, for SAP to SAP on Unix servers. Consequently, the workload required of the SAP administration team can be dramatically reduced, as they no longer need to be distracted by password management issues. At the same time, this integration also results in a superior user experience and can increase security by protecting SAP data in transit between the client and the server using advanced encryption technologies.
The efficiency, end user satisfaction and control provided by single sign-on for SAP through Active Directory and Vintela Authentication Services, yields significant ROI. This solution helps to reduce the help desk burden caused by multiple identities and multiple logins, as it reduces the total cost-of-ownership and leverages the existing investment in AD and SAP for maximum benefits.
Implementing Vintela Authentication Services Single Sign-on for SAP: Provides true AD-based single sign-on for SAP running on Unix or Linux Eliminates the transmission of users’ passwords over the network Can be configured to perform data integrity checks on session data Optionally encrypts SAP data, while it is transported over the network Simplifies deployment without the need for PKI or certificate infrastructure Provides an audit trail for SAP authentication activities with AD
Vintela Authentication Services integrates Unix and Linux hosts running SAP with Windows-based clients through robust, standards-based security. The SAP SNC interface provides SAP clients and servers a platform-independent security and authentication infrastructure, which fully leverages native Windows and Unix security mechanisms. Windows-based SAP clients can exchange secure authentication tokens, using Kerberos tickets with Unix-hosted SAP R/3 servers.
The Single Sign-on for SAP solution is comprised of both a Vintela Authentication Services-configured Unix server which hosts the SAP R/3 application, and a desktop component, which provides GSS-API services to the desktop SAPgui client. Together with Active Directory, this solution is certified by SAP for the BC-SNC 4.0 interface. It is the only certified SAP solution that also provides complete integration of Unix identities with Active Directory, providing the additional benefit of allowing the Unix and SAP administrators who must log on to the R/3 server to also use their Active Directory username and password credentials – or transparently authenticate with a single sign-on-enabled terminal client on a Windows desktop.
Read the Datasheet
Read the Technical Brief
|