Author Topic: Sign on based on Windows Domain Account  (Read 5925 times)

umang@guixt.com

  • Administrator
  • Newbie
  • *****
  • Posts: 34
    • View Profile
Sign on based on Windows Domain Account
« on: May 24, 2017, 01:19:19 PM »
Authentication Scenario
1.   User enter domain credentials on Liquid UI for iOS/Android Native SAP logon screen
2.   Liquid UI Server receives the credential information and passes the credential to Active Directory which provides Kerberos security token to Liquid UI Server
3.   Liquid UI Server forwards the Kerberos token to the system. The Kerberos token is validated on the SAP Application Server (ABAP), and user is logged into SAP ECC.

Pre-Requisites

•   Valid Windows Domain Login Credentials
•   Kerberos Configuration on SAP ECC (Transaction: RZ10)
•   Liquid UI Server v3.5.549.0 and later
o   Liquid UI Server should be on the DOMAIN
o   Kerberos DLL, distributed as part of Liquid UI Server installation

Liquid UI Server Configuration
sapproxy.ini - configuration file
#Configuration for Unified Login based on Windows Domain Credentials
[Proxy1]
ListenPort = 3210
TargetServer = SAPSERVER
TargetServerPort = 3200
GuiXT = 10
SNCName=sidadm@DOMAIN

« Last Edit: July 25, 2018, 03:50:33 PM by Rahul Gera »