Fiori SAML AD

          Hi,

I have a Fiori ABAP based system connected to ECC backend. The apps need to be accessed from inside the network. what would be the best architecture to enable SSO?

From the docs I have read, I think there should be another AS Java system which should integrate between AD and Fiori - probably configure SAML steps as mentioned in Using SAML 2.0 Authentication to Access Fiori Apps from the Public Internet ?

But how do I setup the "identity provider" or in my language- integration with AD? What add-on's do i need on the Netweaver AS JAVA box to enable this?

Thanks in advance.