KnowCardSAP Fiori · Authentication & Single Sign-On
Why is SAML 2.0 often preferred over Kerberos for Internet-facing Fiori SSO?
The full answer is available in the KnowCard app, with spaced-repetition review and AI explanations.
Get the answer in the appMore in Authentication & Single Sign-On
In the service-provider-initiated SAML flow, how does the SAP Gateway server end up trusting a user it never authenticated directly?
Why can't Kerberos/SPNEGO SSO be used from outside the corporate network, and what is the workaround?
What makes Kerberos/SPNEGO attractive for intranet Fiori SSO, and what does it cost in setup effort?
What is SAML, and what does it communicate?
Trace an SAP logon ticket from the issuing system to the accepting system.
How does SAP logon ticket-based SSO work — where are tickets stored, and what must back-end systems do to support them?