Single Sign-On for SAP GUI

Featured Content

High-Availability Setup for SAP Secure Login Service with Microsoft Azure Traffic Manager

The SAP Secure Login Service supports the platform capabilities of SAP BTP for high availability (HA). Still, some customers would like to go beyond the standard HA capabilities and instead implement a dedicated, multi-region failover setup. Learn about the steps that are necessary to configure this setup.

Read the blog post

Enforce Secure Re-Authentication for Each New SAP GUI Connection

Most customers configure the SAP Secure Login Service for SAP GUI solution so that end-users need to authenticate manually only once per day. We have now released a new feature that allows you to disable single sign-on. As a result, end-users need to explicitly authenticate whenever they start a new connection in SAP GUI.

Read the blog post

Simplified Access to the Administration Console of SAP Secure Login Service for SAP GUI

You now have the flexibility to define your own custom group names for access to the administration console, in addition to the existing default group names. This makes it possible to support your own naming conventions and work around restrictions of 3rd party identity providers.

Read the blog post

SAP Secure Login Service for SAP GUI Now Supports Custom Certificate Authorities on AWS

In March 2024, we released the long-awaited Custom Certificate Authority (CA) feature. You can now integrate your own Public Key Infrastructure (PKI) by connecting to a private CA hosted on Amazon Web Services (AWS).

Read the blog post

New CIO Guide: Identity Lifecycle in SAP Landscapes

Explore how identity and access management (IAM) software from SAP supports building successful system integrations in cloud and hybrid environments. With SAP Cloud Identity Services and well-established IAM related industry standards, SAP improves system integration and helps provide a seamless user experience while also improving security and compliance.

Read the new CIO guide

SAP GUI MFA with SAP Secure Login Service and Microsoft Entra ID

This blog post guides you through the setup of an end-to-end scenario for implementing multi-factor authentication (MFA) for SAP GUI with Microsoft Entra ID. The integration with Microsoft Entra ID is accomplished by SAP Cloud Identity Services and the SAP Secure Login Service for SAP GUI.

Read the blog post

Securing SAP GUI with SAP Secure Login Service

The SAP Secure Login Service for SAP GUI provides your SAP GUI users with simple and secure access to their ABAP-based business applications, such as SAP S/4HANA. Learn how to configure single sign-on using the new solution in this practical step-by-step guide, from inception to implementation.

Read the guide

Announcing SAP Secure Login Service for SAP GUI

SAP Secure Login Service for SAP GUI builds on top of the successful concepts of SAP Single Sign-On and offers them in a cloud-oriented way. Rely on a lean cloud service that integrates with your existing corporate identity provider to benefit from its authentication capabilities.

Read the release blog post

Expert Content

Single Sign-On Technologies

Provide your SAP GUI users with simple and secure access to their ABAP-based business applications. Use digital certificates or Kerberos tokens as single sign-on technology.

For implementing single sign-on with digital certificates you can either use our out-of-the box solution via short-lived X.509 certificates or your own public key infrastructure (PKI).

Alternatively, you can use Kerberos authentication tokens. This requires little implementation effort, but provides a considerable simplification to your employees’ authentication processes.

Single Sign-On using Kerberos

SAP Secure Login Service for SAP GUI

SAP Secure Login Service for SAP GUI supports both digital certificates and Kerberos for secure authentication and single sign-on to your SAP systems. Rely on a lean cloud service that integrates with your existing corporate identity provider to benefit from its authentication capabilities.

Release blog post

Solution brief

Overview presentation

Documentation

Road map

SAP Single Sign-On

The SAP Single Sign-On solution will go out of mainstream maintenance end of 2027, and extended maintenance end of 2030. The successor solution that you should use for single sign-on with SAP GUI to on-premise ABAP systems, such as S/4HANA, is the SAP Secure Login Service for SAP GUI.