The following pages deal with Single Sign On (SSO) topics both to the J2EE Engine / Portal (e.g. Windows -> Portal) and from the Portal (e.g. Portal -> ABAP System).
Sigle Sign On to the J2EE Engine / Portal from Windows
The following pages deals with Single Sign On to the J2EE Engine / Portal from Windows. Some time ago SAP offered and support the IISProxy module to use an IIS as a proxy that would authenticate the user. Then the username would be put in the HTTP Header and sent to the J2EE Engine. The engine would trust the IIS and create a SAPLogonTicket and let the user log in without having to enter the username / password again.
The IISProxy is no longer supported, but there are several alternatives available.
Single Sign On from the J2EE Engine / Portal to Backend-Systems