Hi
When implementing "SAPGUI for windows" single sign on using MS kerberos SSP (gx64krb5.dll), what are the prerequsites for the windows domain / domain relationship - client and server-side?
- End-users exist in one windows domain and SAP-server in another: Is trust between the domains a prerequisite?
... or is the only prerequisite that the end user must be domain account (posses a kerberos ticket) and no prerequisites for the SAP server side (trust, domain membership etc)?
BR
Tom
Single Sign-On using the Microsoft Kerberos SSP with the Kerberos wrapper library is only available for user accounts that belong to the Active Directory, that is, domain accounts. It can not be used with local computer accounts.