Does Secure Login Service require a CC for on premise SAPGUI logon with azure AD?

[GrahamNewport]

Hi,

none of the diagrams in blogs show a CC so I was just wondering how the x509 gets passed back to on-premise? The diagrams show SLS as the leading system so surely it needs a tenant to CC connection?

[Harish_Vatsa]

Dear newport.graham,

Please refer to the following architectural diagram, if it helps:

You can also refer to the below SAP link for more info:

https://blogs.sap.com/2023/05/04/sap-secure-login-service-for-sap-gui-now-available/

Thanks,

[GrahamNewport]

I had read these links, posted here only after a lot of thought. It is more about how it is getting back through the firewall to on-premise. Like OK SLS now has to send a message back, how is it getting back. Not just an non-specified arrow on a diagram. A reply from the SAp product expert is good enough though

[Martina_K]

Hello Newport,

The cloud connector is not required in this scenario.

The Secure Login Service provisions a short-lived X.509 certificate to the Secure Login Client on the end-user desktop, which is then used for authenticating the SAP GUI user to the ABAP system.

Best regards,

Martina

[GrahamNewport]

Thanks for the confirmation. Just a TLS link over the internet back to where the On premise SLC is I guess