Configuring the SAP Front End

Use

To prepare the SAP front end for SSO when using Microsoft Kerberos, you choose between the following approaches:

● Configure each SAP front end individually

You configure each machine where the SAP front end is running.

● Configure all SAP front ends automatically

You define a Group Policy for a Windows domain. This policy causes the wizard for configuring SSO to be started automatically in the background the next time any member of the domain logs on to an SAP front end.

These approaches are described below.

Prerequisites

· You have completed Preparing the Primary Application Server Instance.

· You have downloaded the Kerberos configuration wizard (SAPSSO.MSI). For more information, see SAP Note 595341.

Procedure

Configuring SAP Front Ends Individually

...

1. Log on to the machine where the SAP front end is running.

2. Copy the SAPSSO.MSI program to a local directory or to a shared directory on the network.

3. To start the wizard, double-click the SAPSSO.MSI file.

The wizard SAP Single Sign-On Support for Windows 2000 automatically starts and configures the SAP front end for SSO.

Configuring SAP Front Ends Automatically

...

1. Log on to a front-end machine as a domain administrator of the Windows domain.

2. Copy the program SAPSSO.MSI to a shared directory.

3. Choose Start ® Programs ® Administrative tools ® Active Directory Users and Computers.

The dialog box Active Directory Users and Computers appears.

4. Right-click the domain for which you want to set up SSO and choose Properties.

The dialog box Properties appears.

5. Choose Group Policy ® New to start creating a new policy object.

The dialog box for creating a new policy object appears.

6. In Group Policy Object Links, enter a name for the new policy object, such as SAPSSO.

7. Choose Edit to define the contents of the policy.

8. In the Group Policy Editor choose User Configuration ® Software Settings ® Software Installation.

The Deploy Software dialog box appears.

9. Right-click Deploy Software and choose New ® Package.

The Open dialog box appears.

10. Select the file SAPMSSO.MSI from the shared location.

11. Specify the path with the UNC name (\\\).

12. Select Assign and confirm with OK.

You have now created a new Group Policy.

The next time any user logs on to the domain with the SAP front end, the wizard SAP Single Sign-On Support for Windows automatically starts and configures the front end for SSO.