Hi All,
I have the following question regarding NW SSO with SAML and Active Directory Domain:
- In the installation guide, I found that we need to perform SAP Application Server domain installation if we want to use Single Sign-On. As far as I understand, this requirement is true if we use Kerberos-based solution. But how about if SAML is used, is the SAP Application Server required to be in Windows domain?
- In the case the SAP Application Server has to be in domain, in the case the domain of client computers are on the different domain from the domain of SAP server, do we have to establish the trust between the two domain in the case SAML is used? I found that with SAML, we can provide cross-domain SSO solution but it's not very clear to me how to enable this scenario.
- I am looking for the configuration guide for SSO based on SAML with NW IDM Federation (the component of SAP SSO 2.0), especially about User Credentials Verification with Microsoft Active Directory. I think we need to do some configuration steps so that the Identity Provider on AS Java can contact Active Directory to get user credentials, could you please provides some hints about this?
Best regards,
Duy