SECURITY_GRCbeginner
SNC and SSO
Understand Secure Network Communications and SSO for SAP GUI or RFC, including SNC identities, Kerberos or certificate trust, encryption, user mapping and backend authorization. Learn to separate secure transport, authentication and application permissions.
Overview
Understand Secure Network Communications and SSO for SAP GUI or RFC, including SNC identities, Kerberos or certificate trust, encryption, user mapping and backend authorization. Learn to separate secure transport, authentication and application permissions.
Lessons in this topic
- SNC and SSO Fundamentals for SAP GUI and RFCUnderstand how Secure Network Communications protects classic SAP GUI or RFC traffic and how single sign-on maps a trusted external identity to an SAP user.
- SNC and SSO for SAP GUI and RFC: Trust, Kerberos and CertificatesUse Secure Network Communications to protect SAP GUI and RFC traffic and enable strong single sign-on using supported Kerberos or certificate-based trust instead of transmitting reusable passwords.
Interview questions covered
- What are the core concepts of SNC and SSO, and how would you explain them clearly in an SAP interview?
- How would you apply SNC and SSO in a real SAP project? Walk through the design or implementation approach.
- A production issue is reported in SNC and SSO. What would you check first, and how would you troubleshoot it systematically?
- What are the most important design decisions, trade-offs, and best practices in SNC and SSO?
- Suppose you inherit an existing SNC and SSO solution. How would you review it before making a change?
- You are the senior consultant/architect responsible for SNC and SSO for SAP GUI and RFC: Trust, Kerberos and Certificates. The project situation is: Users could establish an SNC-encrypted SAP GUI connection but still received a password prompt. How would you assess the design, identify the highest-risk failure modes, and define the evidence required before approving it for production?
- Using this SAP project situation — A user's SAP GUI session is encrypted but still prompts for a password — explain SNC and SSO Fundamentals for SAP GUI and RFC. What should happen, which concepts or process steps matter, and what common mistake would you avoid?