SAP-GUI Single Sign-On based on SSL certificates

A comprehensive guide on Single Sign-On and SNC encryption between SAP GUI client and SAP server. Starting from client installation to successful login with authentication via client SSL certificate. Also covers the certification authority build.

TOC:
0:21 - My S/4HANA-like Sandbox at home
0:47 - SAP-GU installation with required options
3:08 - Connection setup
3:54 - Logon to my system to check STUST configuration
5:33 - Generation of Certificate Signing Request (CSR)
8:24 - Certification Authority build planning
9:13 - Building own CA witn OpenSSL
17:12 - SAP SNC certificate chain preparation
19:00 - Importing Certificate Resopnse
20:35 - SNC wizard
24:52 - Addding CA to trusted list
27:09 - Configuring SNC encryption in SAP-GUI
27:47 - Trusting SAP server certificate in Windows
30:16 - Successful secure connection to SAP server
31:01 - Client certificate generation and signing
33:59 - PKCS12 preparation
35:23 - Adding user key and certificate to repository in Windows
36:35 - Installing SAP Secure Login Client
37:23 - Secure Login Client configuration
37:50 - Adding SNC string to SAP user account
38:46 - Successful logon with Single Sign-On based on client SSL certificate
39:27 - Summary

#SAP #SSL #security #sapsecurity

[alejandrocolas]

I have no words.... Excellent content for a complex subject. Very generous on your side to share your knowledge.

[frab]

one of the best That i have ever seen talking about this topic

[tonyng]

Thank you. I learned a lot even though I do sap for a long time. Been awhile.. Please do more like this. Even the step is boring. What about do x509 connect with Middleware ex. Webmethods or Tivoli....

[nadeemdada]

Thank you !! My concept is now all from clear from A-Z regarding certificate & SNC config.

[sheldondesouza]

Thanks ! This is a very clear step by step video.

[JicArosni]

absolute legend you are, thanks for this. please do more!

[ClairBowersbuyu-absadv]

This is Excellent ! Lukasz very well done. Chapeau !

[pk]

very good one, if possible plz make a detailed video on strust

[mfiztanb]

Excellent sir
Please configure SAProuter with SNC

[jpg]

Excellent. Thanks. So for every user we have to generate each user certificate for SSO. If there are thousands of users then thousands of cert to manage? Or there are other better ways?

[shalanghaiyou]

As far as I know, the SLC client is part of SAP SSO and should not be a free trial software. It can indeed achieve SNC seamless login through self signed x509, I have tested the implementation of Java ABAP single sign on through self signed x509, and I believe it still charges a fee？

[mfiztanb]

Please make video on how to configure R/3 support SAP ERP EHP8 ECC 6

[danpal]

how can we work for dialog intances with http certificates, they work on central instance and not in the dialoga, found the ASN is blank, should we ask for an alternate server name, is this snc issue? found notes but only mention web dispatcher is the solution. thanks wizzard sapdalf

[Srinivassunrise]

Please create video on scan the data while uploading to SAP culd be excel, pdf etc