Hello,
we want to migrate from a non-SAP kerberos solution to SAP SSO 2. The existing systems (ABAP stack) have SNC and kerberos authentication activated using the standard MIT solution Kerberos (krb5) also in the client side.
We want to migrate to CommonsCryptolib but we are facing the following issues:
- With Krb5 in SU01 snc user mapping is: p:xxxxxxx@domain.com but with SAP SSO it should be: p:CN=xxxxxxxxxx@domain.com
- If we switch to CommonsCryptolib the Kerberos MIT client does not work. therefore, we would need to setup the SAP Secure Login Client however we do not have access to the systems configured with the krb5.
We are aware that SAP does not provide any support for non-SAP solution. However could you provide me any recommendations on how to migrate to SAP SSO without impacting the client side?
Regards,
Mehdi.