Parameter
service/sso_admin_user
Short text
Additional users authenticated by client certificate authorized for system administration
Parameter Description
This is a vector parameter in the format [parameter name]_[index]. The regonized index range starts at 0. Index gaps are not permitted.
Specifies additional users that are authenticated with X.509 certificates and that are authorized to administer the system using the Web service interface of the start service. Set a parameter for each user, starting with service/sso_admin_user_0. Specify the subject DN of the respective client certificate as the parameter value. You can use the wildcards * and ?.
service/sso_admin_user_0 = CN=D??????, O=SAP-AG, C=DE
service/sso_admin_user_1 = CN=C123456, O=SAP-AG, C=DE
authorizes, for example, various D users and the user C123456.
The prerequisite for this is the correct configuration of SSL on the instances of the systems with suitable server certificates so that the start service can provide HTTPS communication (port 5XX14) and can validate the client certificates.
