The SNCCONFIG transaction allows you to display an SNC configuration by setting relevant profile parameters. This transaction displays the following settings:
- Usage of SAP Single-Sign-On for SNC with Kerberos and SPNego
- Same SNC identity for all application server instances
- Single sign-on for end users
Restrictions
The same profile parameters are used for all application server instances.
Only SAP Single Sign-On is supported as an SNC product. You cannot use this transaction to configure any other third-party SNC product.
You cannot change individual profile parameter values in this transaction. However, you can still implement complex profile parameter configurations using RZ11 and Trust Manager to do so.
Integration
The SNCCONFIG transaction displays a table that lists the application server instances that are available for an SAP system. The table contains the host name, the SNC state, and the server state. If you select an application server instance, the bottom section displays the relevant profile parameters for SNC and SPNego.
In the bottom section, you can see the profile parameters values for the application server instances. The SNC and SPNego tabs display the SNC and SPNego profile parameters and their respective values. SNC and SPNego are important if you want to implement single sign-on for Kerberos authentication.
Requirements
- SAP Cryptographic Library (CommonCryptoLib) is available in the SAP system. For more information, see SAP Note 1848999.
Features
Simple display of an application server instance’s default SNC configuration for single sign-on with Kerberos and SPNego. The following functions are available:
• Display of the current SNC configuration state of all application server instances belonging to an SAP system
• Check of the current SNC configuration
Procedure
Checking SNC State
To check whether you can start an AS ABAP with the given SNC configuration, take the following steps:
- Select the row for the application server instance you want to check. The field Default SNC Identity contains the SNC name. The SNC and SPNego tabs display the profile parameter settings of this application server instance.
- Choose Check SNC.
Result
- If your check is successful, the respective cell in the SNC State column changes to SNC Check OK. This means that the SNC configuration of the application server instance is correct and can be activated.
- If the SNC configuration is not correct, the column SNC State has the value SNC Check Error. In this case, choose the short error text, and a popup with a detailed error description appears.
- If the SNC configuration is correct, the SNC State column contains Restart Required. This means that a restart is the next steps for activating SNC protection of the selected application server instances.
