Hi,
I am trying to find a clean way of setting up Kerberos with NWBC. I have seen few discussion on SSO with NWBC and noticed different suggestions based on the current infrastructure which is already available at client place.
In my landscape, I have an NW Portal 7.3 and an SAP ERP system. Kerberos is already setup for the Portal and SSO is established between Portal and ERP. Hence, when a user logs into PC, they can launch the Portal and access backend ERP applications without the need to re-authenticate.
Now, NWBC comes into picture and the client wants to use it to access the ERP system. I am aware of Kerberos setup on the SAPGUI which could allow access to ERP system. Since the users would not be using the SAPGUI logon pad, where do I make the SNC settings? Do we need to make any changes to the logon Procedure for the NWBC service in SICF ?
I also came across an interesting blog by Andre Fischer where he mentions "The SAP NetWeaver Business Client supports Windows Integrated Authentication as the initial authentication if the SAP NetWeaver Portal services infrastructure used is configured to use the SPNego Login Module". I am not quite sure how to achieve this.
Can someone please share their experience.
Cheers,
Murali