We are Implementing Single Sign on in our Portal System with Microsoft Active Directory.
Our current landscape has Portal System with ECC as UME.
I have followed SAP note 1488409 - Spnego Implementation. As per the note below configuration has to be done in Portal and ADS for SSO to work.
1. Create Service user and register SPN on the ADS
2. Run Spnego Wizard and assign the Domain, Service user
3. In NWA : Click -> Configuration -> Security ->Authentication and Single Sign ON->Ticket and Add "SPNegoLogonModule" and adjust the sequence of login Modules.
4. Adjust the explorer settings
Now my question is:
1. Is this approach correct or i am missing something?
2. Do we need to select options "AES Kerberose authentication for 128 and 256 bit encryption" for service user in Portal 7.3?
3. What settings are needed in ADS for linking the Domain user to Service user?
4. If user name in Portal is different from Domain user, to fix this if i assign the Alias name of domain user in Portal system will SSO work fine?
5. Will there be any difference in the above SSO approach if UME is maintained as Portal->ECC->ADS or Portal->ECC.
Help will be appreciated.
Thanks