KnowCardSAP Fiori · Authentication & Single Sign-On
Trace an SAP logon ticket from the issuing system to the accepting system.
The full answer is available in the KnowCard app, with spaced-repetition review and AI explanations.
Get the answer in the appMore in Authentication & Single Sign-On
In the service-provider-initiated SAML flow, how does the SAP Gateway server end up trusting a user it never authenticated directly?
Why can't Kerberos/SPNEGO SSO be used from outside the corporate network, and what is the workaround?
What makes Kerberos/SPNEGO attractive for intranet Fiori SSO, and what does it cost in setup effort?
What is SAML, and what does it communicate?
How does SAP logon ticket-based SSO work — where are tickets stored, and what must back-end systems do to support them?
Which SSO mechanisms work for which classic Fiori app types?