Setting up SAP SSO Using X.509 Certificates

Follow these procedures to define a trusted relationship between Unwired Server and the SAP EIS using X.509 credentials, and assign a security configuration to a package or domain that supports X.509 authentication.

  1. Generating and Installing an X.509 Test Certificate on Unwired Server
    Generate an X.509 certificate on Unwired Server to use in testing SSO connections with SAP Systems.
  2. Creating a Keystore and Importing an X.509 Certificate and Private Key
    Create a keystore on the Unwired Server host into which you can import the certificate and private key (PKCS12) issued by the SAP system administrator, which is required for SSO using X.509 certificates.
  3. Installing and Configuring Certificates on Unwired Server
    Use the Java keytool command to import SAP certificates into the Unwired Server truststore.
  4. Implementing SSO in an Unwired Server Cluster
    Place required files in the appropriate primary Unwired Server subdirectory so they are distributed to all Unwired Servers within the cluster during cluster synchronization.
  5. Creating and Assigning a Security Configuration That Uses X.509 Credentials
    Create a new security configuration, assign the CertificateAuthenticationLoginModule authentication provider to it, and assign the security configuration to an Unwired Server domain.
Parent topic: Single Sign-on for SAP
Related concepts
Preparing Your SAP Environment for SSO
CertificateAuthenticationLoginModule Authentication Provider
Single Sign-on for SAP
Preparing Your SAP Environment for SSO
Related tasks
Preparing Unwired Server Hosts for SSO
Setting up SAP SSO Using SSO2 Tokens
Related reference
Implementing SSO for SAP
Certificate Authentication Properties