Pluggable Authentication Service
Appearance
Pluggable Authentication Services (PAS) allows SAP user to be authenticated outside of SAP. When the user is authenticate by an external service, the PAS will issue an [SAP Logon Ticket]] or x.509 Certificate which will be used for future authentication into SAP systems. The PAS is generally regarded as an opportunity for companies to either use a new external authentication system or an existing external authentication system. In some cases, the PAS is used with an external single sign-on system.
External Authentication Systems
- Windows NT LAN Manager Authentication
- Windows NT domain controller (i.e., User ID and password verification)
- Binding LDAP to a directory server
- Authentication using the Secure Sockets Layer (SSL) protocol and x.509 certificates
- HTTP header variables (mapping userIDs)
- Authentication mechanism through the AGate