SPnego on ABAP -- SICF services - Alternative Logon Procedure

Friends,

I'm still having fun with SPnego on ABAP, trying to get it working consistently.  I came across an interesting note today:

2010596   SICF: "SPNEGO Authentication" disappears from "Alternative Logon Procedure"

besides the note corrections and the recommendation to be a certain kernel level, it mentions some errors that might happen if you mess with the logon procedures.  That got me thinking.

if you want to implement SPnego for ABAP, and you have certain specific services such as:

/sap/crm_logon

/sap/bc/nwbc

/sap/bc/gui/sap/its/webgui

if you click on them in SICF --> Logon Data (tab) --> Procedure = " Standard"

but if you go into change mode, you can change it to "Alternative Logon Procedure".  Then scroll to the bottom and there is a list of order:

1 Logon Through HTTP Fields

2 Logon Through SSL Certificate

3 SAP Logon/Assertion Ticket

4 SAP Assertion Ticket

5 Basic Authentication

6 SAP RFC Logon

7 SPNego Logon

8 SAML Logon

9 Logon Through Service Data

So, my question is, if you want to SPnego for ABAP, do we need to mess with this?  Should we change to "Alternative Logon Procedure". and move SPnego up above "Basic Authentication"?

Or maybe just check the box that says "Use all Logon Procedures"?

Anyway, I could not find any notes / threads specifically on this and was wondering if you guys had any ideas?

Thanks,

NICK