Single Sign on pros and cons

server administration XI Server Discussion
1

Hi,
Can some one explain what are the pros and cons with Single Sign on?

Currently we are running BOXI R2, planning to migrate to BOXI 3.1.
Authentication : Windows AD

-Crossette

crossette29 (BOB member since 2009-09-23)

2

Pro: Users don’t have to authenticate as frequently when SSO is configured.
Con: SSO can be a total nightmare to configure.

clarence (BOB member since 2005-11-18)

3

SSO can be a bit hard to set up. But if you have a support contract, you can find KB articles and help from SAP.

Based on personal experience, it did take us some time to understand all the pieces

AD,
Kerberos,
SPN

etc, but i believe it’s worth it now.

ramaks (BOB member since 2009-03-31)

4

We do have SAP support and we know how to configure SSO.
But my question is, are there any future complications bcz of SSO?

I know one: Sharing users (Single machine, multiple users on shift basis) can’t access BO Application(Unitl unless re-login)
2.??
3.??

Sorry for the confusion initially

crossette29 (BOB member since 2009-09-23)

5

That’s a valid point. It’s a feature you should enable only if it’s useful to a majority of users.

In our case , most apps in the firm have SSO, so users demand the same even in BO.

Issues:

We have one where a Microsoft KB patch breaks SSO. Our only known solution is to try to remove the patch from user PC.

ramaks (BOB member since 2009-03-31)

6

It’s only an issue if you are running Internet Explorer…not an issue if you are using FireFox or another browser.

MJRBIM :canada: (BOB member since 2007-03-23)

7

Even if there are Users on different shifts using one (1) PC, those users should be logging-out / logging-in to the Windows OS using an individual WinAD account for Windows.

Using generic-access or a “machine login” is a pretty bad idea from a security or compliance POV.

MJRBIM :canada: (BOB member since 2007-03-23)