SAP Secure Login Service for SAP GUI Now Available (2024)

On May 4, 2023, SAP released the SAP Secure Login Service for SAP GUI. This new solution builds on top of the tried and proven SAP Single Sign-On product and offers single sign-on in a cloud-oriented way. It allows you to rely on a lean cloud service that integrates with your existing corporate identity provider to benefit from its authentication capabilities.

Why do we offer a new solution for single sign-on with SAP GUI?

SAP Secure Login Service for SAP GUI supports both digital certificates and Kerberos for secure authentication and single sign-on to your SAP systems. So, you can provide your SAP GUI users with simple and secure access to their ABAP-based business applications, just like with the existing SAP Single Sign-On product. In addition, the new solution comes with a set of new capabilities bringing enhanced user experience, better integration with your existing authentication infrastructure, and lower TCO.

For issuing short-lived X.509 certificates, the SAP Secure Login Service for SAP GUI no longer relies on an on-premise server running on an SAP NetWeaver Application Server Java. Instead, the server functionality for enrolling X.509 certificates is now provided by a cloud service. As a result, you no longer need to operate an AS Java.

But there is more! You can easily reuse your existing identity provider solution, such as SAP Cloud Identity Services – Identity Authentication or a corporate identity provider, for example Microsoft Azure Active Directory or Okta. This way you benefit from their authentication capabilities, such as multi-factor authentication, for example.

The necessary functionality on the AS ABAP server side already comes with the AS ABAP kernel (SAP Cryptographic Library), same as before.

Now let’s take a closer look at the enhanced capabilities that SAP Secure Login Service for SAP GUI is offering.

Use X.509 certificates based on a lean cloud service

As already mentioned above, the SAP Single Sign-On product relies on an on-premise server running on an AS Java for the advanced scenarios using X.509 certificates, such as multi-factor authentication. Customers need to operate an AS Java with a dedicated configuration of the authentication stack.

With SAP Secure Login Service for SAP GUI, the authentication process and certificate enrollment are performed by cloud services. Furthermore, the existing authentication configuration of the identity provider can be reused. Simply take the authentication options that have already been implemented for browser-based UIs on your identity provider and use them for SAP GUI as well!

Easily integrate with your existing identity provider

The SAP Single Sign-On solution already offered some limited integration with identity providers. However, the component used on the client side, the so-called Secure Login Web Client, provided a sometimes confusing user experience that people had to get used to. And it did not work in multi-user environments.

SAP Secure Login Service for SAP GUI offers a better integration with identity providers. With the new solution, the Secure Login Client seamlessly integrates with the identity provider UIs. As a result, when users start an SAP GUI connection, they will get the exact same user experience as they would have in the browser. This will further increase user acceptance of the solution.

Authentication factors and policies depend on the identity provider configuration. This way you benefit from their authentication capabilities: for example, using strong multi-factor authentication, biometric authentication, or Web Authentication and FIDO.

Offer single sign-on based on Kerberos technology

Many of our existing customers are still using Kerberos technology for single sign-on with SAP GUI. This scenario is based on the corporate Windows domain and Microsoft Active Directory. Will this still be possible with the new solution? The simple answer is yes!

SAP Secure Login Service for SAP GUI does support single sign-on via Kerberos tokens. In that scenario, you only require the Secure Login Client on the client side, which is a component of SAP Secure Login Service for SAP GUI. There is no need to access the cloud.

A picture is worth a thousand words

Finally, let’s have a quick look at the architecture overview of the SAP Secure Login Service for SAP GUI solution:

SAP Secure Login Service for SAP GUI Now Available (1)


SAP Secure Login Service for SAP GUI: Architecture overview


More information

For more information about the SAP Secure Login Service for SAP GUI, check the following resources:

If you want to learn more about the new solution, actively engage with SAP subject matter experts and your peers, and stay up to date about the topic of single sign-on for SAP GUI, join our community here:

https://community.sap.com/topics/single-sign-on

Can't find an answer? Ask your question directly here in SAP Community!

SAP Secure Login Service for SAP GUI Now Available (2024)

FAQs

What is SAP Secure Login Service for SAP GUI? ›

The SAP Secure Login Service for SAP GUI is a cloud service that enables multifactor authentication (MFA) and single sign-on if you use the SAP GUI interface. Based on the configuration of your SAP Cloud Identity Services tenant or corporate IdP, authentication factors like passwords, TOTP tokens, local X.

How do I enable SSO in SAP GUI? ›

Activating SSO on the SAP Logon
  1. Select an entry in the SAP Logon window and choose → Properties Advanced.
  2. Select Enable Secure Network Communications.
  3. In SNC name, enter: p:< DN name of the AS ABAP > Note. ...
  4. Choose OK to confirm your entries.

What is the latest SAP Logon version? ›

SAP GUI latest patch
06.Sep.2024SAP GUI for Windows 8.00 (32/64bit) patch 9 released
31.Mar.2022SAP GUI for Windows 7.70 patch 6 released
21.Feb.2022SAP GUI for Windows 7.70 patch 5 hotfix 1 released
27.Jan.2022SAP GUI for Windows 7.60 patch 14 released
21.Jan.2022SAP GUI for Windows 7.70 patch 5 released
24 more rows
Mar 5, 2014

How to install secure login client in SAP? ›

In the Search field, type “Startup Apps.” Then click the Startup Apps/System settings result. The Startup App listing displays. Ensure SAP SLC is displayed in this list and that the toggle is on. You have successfully installed the SAP Secure Login Client, and it will start during Windows login.

Is SAP GUI still used? ›

It is still used, but was replaced by SAP Fiori for SAP S/4HANA.

What is the difference between SAP Logon and SAP GUI? ›

SAP Logon pad is a tool for configuring your SAP server. The SAP GUI is the graphical user interface that you use to connect your computer to the SAP system. SAP Logon pad and the SAP GUI are both part of the same package, but they are not interchangeable.

Is SAP GUI going away? ›

Update: Support for SAP GUI for Windows 7.70 ended on 9th of April 2024!

Is SAP outdated now? ›

It is not outdated and It will not be outdated for the next 20 years. I don't think any application will replace SAP ERP software near future.

How to install SAP GUI logon? ›

How to Install SAP GUI in Laptop/System. Step 1 : Go to Below Path as Highlighted in the Screen. Step 2 : Right Click on SetupAll and Run as Administrator Browse the path for SetupAll.exe Page 2 Step 3: Click Next in Above Screen. Step 4: Select the below options & Click on Next.

How do I install secure client? ›

Start the installation in the SecureClient Installation Wizard. Select Next to continue. Select Next to install SecureClient on your device. Select Finish to complete the SecureClient installation.

How to add certificate in SAP Secure Login Client? ›

Procedure
  1. Make sure that no other SSH agent is active. ...
  2. Open the Secure Login Client. ...
  3. Go to the SSH Agent tab in File Options... ...
  4. Make sure the checkbox Enable Secure Login SSH Agent is enabled.
  5. Choose Apply to start the Secure Login SSH Agent. ...
  6. Choose the certificate you want to use for the SSH agent.

What is SAP secure? ›

Traditionally, SAP security comprised the tools and processes that controlled what users can access inside an SAP landscape. With malicious actors now penetrating and lurking deep inside corporate networks, SAP security must go far beyond its basic access control function.

How do I enable security log in SAP? ›

To create an audit log for the user SAP*, you must enable generic user selection and escape the asterisk. Enter SAP#* . Select this option to allow only a single security audit file for the application server and enable the Maximum Size of Audit File parameter. Maximum space for security audit file.

How do I open SAP GUI security? ›

Add SAP GUI security settings
  1. In the SAP GUI Options - SAP Logon window, go to Security->Security Settings.
  2. Click Open Security Configuration.

How do I stop SAP GUI security pop ups? ›

How i can disable this popup ? Furthermore you can enable/disable this function in the SAP GUI without editing the registy. Simply click (in the SAP GUI) "Option" -> "Security" -> "Security Settings". Here you can set the "Default Action" to whatever you want.

Top Articles
Latest Posts
Recommended Articles
Article information

Author: Melvina Ondricka

Last Updated:

Views: 6429

Rating: 4.8 / 5 (48 voted)

Reviews: 87% of readers found this page helpful

Author information

Name: Melvina Ondricka

Birthday: 2000-12-23

Address: Suite 382 139 Shaniqua Locks, Paulaborough, UT 90498

Phone: +636383657021

Job: Dynamic Government Specialist

Hobby: Kite flying, Watching movies, Knitting, Model building, Reading, Wood carving, Paintball

Introduction: My name is Melvina Ondricka, I am a helpful, fancy, friendly, innocent, outstanding, courageous, thoughtful person who loves writing and wants to share my knowledge and understanding with you.