Hi All,

I have a need to proto type the SAP GUI sso using Kerberos. Before I proceed, would like to know if this can be achieved without buying any additional product or license. We don't own the license for SAP Net Weaver SSO  suite.

My requirement is..

1. Once the user is logged in to his/her windows workstation, user launches the SAP logon, selects the SAP system and it should not prompt the user to supply the userid and password.

The below url reference is a old IBM document, the 1st and 2nd section talks about the SAP GUI and SAP R/3 system kerberos integration. I am not sure if this below implementation solution is still valid.

Single sign-on for SAP with Tivoli Access Manager and Microsoft Windows

I did see the below document as well..  Looks like it is possible to implement without SAP NW SSO / secure login.

http://help.sap.com/saphelp_nwmobile711/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm?frameset=/en/44/0ebb40b9920d1be10000000a114a6b/frameset.htm

The document talks about the gsskrb5.dll, if my SAP ABAP system is running on AIX or Z/OS then how to get the correct version of gsskrb5 for these systems?

What will be the process for the non-window servers? below

1. 2.  Copy the library to the appropriate Windows system directory on the primary application server instance:

○  Drive:\%windir%\system32

○  Drive:\%windir%\SysWOW64

I would highly appreciate the guidance in this regard.

     -