Greetings,
I have a puzzle that I'm hoping that someone has dealt with in the past.
We are working on impementing Single Sign On in our environment and we are mostly successful in our task.
In our portal, we are using authentication with LDAP via SPNGO. In our SAP GUI, we are using SNC names with Kerberos.
Where I'm having a problem is the ABAP WebDynpro that is accessed via URL without having first logged into the SAP GUI. If a transaction is called from within the GUI (which then opens a browser to show the Web Dynpro), the user is connected with no issue because they are already logged into SAP and have an SAP Logon Ticket.
When they call the WebDynpro from a browser using the server name and an alias set in our ICM configuration, they are required to log in using their SAP account.
Is there some setting that I can put in the WebDynpro configuration which would either behave like our portal to use LDAP to look up the user or like the GUI to use SNC to authenticate? I'm sure it must be possible but I am stumped as to what I need to configure to make it happen.
Thanks in advance,
Conrad Thonger