Sanjay Gannon

Mar 23, 2017 at 11:46 AM

2FA Authentication for ABAP stack

https://answers.sap.com/questions/161203/2fa-authentication-for-abap-
stack.html

Follow
RSS Feed

Hi Experts,

We are planing 2FA Authentication for ABAP stack to approve payments in SAP
and to use Entrust Identity Gaurd as a(Third part tool to generate passcode) for
2nd Factor of authenticator.

Is it possible 2FA Authentication for ABAP stack? Any prerequisites required to

set up 2FA foe ABAP stack

Regards,

Sanjay

 Add a Comment
 Alert Moderator

Assigned Tags

 SAP Single Sign-On

 SAP NetWeaver Application Server for ABAP

Similar Questions

 SSO implementation using 2FA with Radius server. currently SSO is working with Kerberos.

Priyanshu SrivastavaOct 25, 2018

 How to disable Single Sign On (SSO) and enter user manually in crome without authenticating 2FA?

Bina KhatnaniDec 02, 2021

2 Answers
Sort by:
Votes
Newest
Oldest
Best Answer
-1
Vote up Vote down
Avinash Chandak
Mar 25, 2017 at 03:33 PM
Yes, it is possible. You will need to use the SAP Netweaver Single Sign On
product, and configure Entrust as a RADIUS provider. You will also need to
enable SNC using X.509 certificates on your ABAP back end, and install the
Secure Logon Client on the front end (user PC with SAP GUI).

 Add a Comment
 Alert Moderator
 Share

1 comment
Phaneendra Kakani
Apr 22, 2020 at 12:15 PM
Hi Avinash,

If there are steps to follow that you could kindly share. We already have SSO configures and it works successfully.

The challenge is the 2FA that needs to be configured with OTP sent via SMS (3rd party SMS gateway) and E-mail(Exchange server)

Detailed guidance would be appreciated.

Thank you in advance

 Like 0
 Share
 Alert Moderator

Vote up -1 Vote down

Sanjay Gannon
Apr 11, 2017 at 11:12 AM
Hi Avinash,

Below are the prerequisites for 2FA

PREREQUISITES

1. You have your AS JAVA installed in your landscape---> We have JAVA system
in our lanscape
2. Secure Login Server 2.0 (SLS) installed on the AS Java.---Downloaded

3. Secure Login Client 2.0 (SLC) installed on the user machine. Downloaded

4. You have SSO Authentication Library 3.0 installed on SAP NetWeaver

Application Server (AS) Java. Downloaded

5. All AS ABAP users, who need to use this scenario, are visible in the SAP
NetWeaver UME User store and they have the SAP NetWeaver UME role
OTP_USER assigned. This role is necessary for users to be able to use the OTP
activation self-service. ---->using LDAP

6. The OTP activation (on a mobile device using SAP Authenticator) has been
completed for all AS ABAP users, who need to use digital signatures with OTP
scenario. We can download app and we can configure

7. You have your AS ABAP installed and running and the SSF settings
configured for the required SAP applications-- Let me know what are the
configurations required for this? currently we are on EHP7. Pleae do needful.

Regards

Surendra.

 Add a Comment
 Alert Moderator
 Share