The SSO parameters need to be configured and activated in the Central Instance. The SAP user accounts also need to be mapped to the Active Directory accounts, which are case sensitive. Finally, each desktop client needs the SAP Kerberos SSO support. You can deploy it through a group policy or you can install it manually on each desktop.
A CATT can help automate the mapping of SAP and Windows accounts.
Dig Deeper on SAP Basis
Related Q&A from Giovanni Davila
Learn how to transfer a client from one server to another in this administration tip from Basis guru Giovanni Davila. Continue Reading
Learn fundamentals of transport management and STMS from Basis guru Giovanni Davila in this expert tip. Continue Reading
Giovanni Davila, Basis expert, provides advice on how to copy all SAP users from one system to another in this tip. Continue Reading