SAP Single Sign On

SAP Single Sign On is a security product from SAP that allows users to have secure access to SAP and non-SAP applications with a single password. This is intended to increase company security and efficiency by providing access to applications on all systems.

According to SAP, SAP Single Sign On provides benefits in security, reducing costs and IT efficiency. Which will strengthen corporate security by using advanced authentication and encryption technology, and all passwords are stored in one centralized and protected storage area. Costs can be reduced by limiting the number of password-related calls that have to be handled by help desks, and by minimizing manual authentication and password resetting. IT efficiency can be improved because there is no need to provide, protect, or reset passwords or manage password policies on various systems.

According to the vendor, SAP Single Sign On works for SAP and non-SAP applications. It was developed by Secude, SAP's technology partner, and was acquired by SAP in 2011. It is based on standard security technologies, including Kerberos, X.509 digital certificates, and SAML (Security Assertion Markup Language).

The security features of Single Sign On SAP include:
Integration by implementing existing public key infrastructure (PKI), allows the use of a single PKI if the company already has a previous one;

Automatic certificate availability cycle management for SAP NetWeaver Application Server for ABAP, which can reduce manual certificate renewal efforts, prevent downtime and limit human errors in certificate renewal;

Secure Login Server that allows several ways to provision X.509 certificates for mobile devices;

An encryption-only mode that allows network encryption for SNC protocols that communicate with other SAP systems even when a user's specific security token is not available or has not been configured;

Secure Client Web Login allows business processes to run via the browser, either on prem or in the cloud; and

Supports "Perfect Forward Secrecy" for SNC Communication, which reduces the risk of "compromised keys" that hackers normally use to decrypt data from previously recorded sessions.

SAP Single Sign On is available under license and can be downloaded from the SAP Support Portal.
Blogger
Disqus

No comments