SAP Single Sign on 3.0 with several Domains

Hi all,

im facing an actual problem with integrating SAP SSO within our enviroment. As of now we have two domains.

[email protected] -> SAP-Servers (Netweaver, HANA) are here.

[email protected] -> Just accesing our SAP-Systems via SAP Logon (MPLS)

The domains do not have an trust relationship. As i unterstand i need to configure service accounts in both AD

´s. Which i already did for domain1.de. SAP SSO works for the User in this domain.

My questions are now:

1. Do i need to create the Service account on domain2.co.uk with the same Name, SPN and password?

2. What do i have to configure within SAP (snc1) for the user using an email with @domain2.co.uk?

Do i need to do additional steps? If you need any further informations please let me know.

I read several notes like:

https://help.sap.com/doc/7d3f26c449524c54b5d8232e11f0a771/3.0/en-us/secureloginforsapsso3.0_uacp.pdf

SAP Single Sign-On: Authenticate with Kerberos/SPNEGO | SAP Blogs

Best regards

Tim

Scroll to Top