SAPGui for Windows Multiple Logon with Portal

Question

Hi,
We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
I came across certain threads and also notes but none seem to provide a solution....
[Restrict multi logon to R/3 system from portal using single sign on.    |Restrict multi logon to  R/3 system from portal using sigle sign on.;
[SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it?    |/thread/1623980 [original link is broken];
Note 142724 - Prevention of multiple SAPGUI logons
Thank you in advance.
Best regards,
Dharmi
Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

Answer 1

Lonny,
The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
Thanks,
Tim