SAP Single Sign-On (SAP SSO)

Single sign-on (SSO) allows users to access all computers and services for which they are authorized using centrally stored login data via an identity provider (IdP). This means that users do not need any additional login data.

The IdP checks the user's authorizations. If authentication is successful and the authorizations are correct, the user is issued a token that allows access to one or more services. This option offers certain advantages for the user, especially in portals. Here, for example, the identity of the logged-in user can be passed on to the layers that make up the portal without the user being aware of this.

Since different applications and resources support different authentication mechanisms, single sign-on must store the login credentials used for initial authentication internally and convert them into the login credentials required for the various mechanisms.