There are many ways to implement our products...

The implementation scenarios described below show some of the many ways to implement the TrustBroker products. Click on the link to open the PDF, which include a high level summary, details of key features and benefits, detailed technical information explaining how the product works, and information about pre-requisites. 

Secure Single Sign-On for users of SAP Front-End Software on Windows, e.g. SAP GUI or SAP Business Explorer (BEx)

A user can logon to a Windows workstation using an Active Directory domain user account, then logon to SAP systems (using software installed on the workstation such as SAP GUI or SAP Business Explorer) without being asked for any additional credentials. 

Secure Multiple Sign-On for users of SAP Front-End Software on Windows, e.g. SAP GUI or SAP Business Explorer (BEx)

A user can logon to a Windows workstation using an Active Directory domain user account, or a local Windows user account (e.g. when using a shared workstation, or a workstation that is not joined to a domain). 

When they logon to SAP systems (using software installed on the workstation such as SAP GUI or SAP Business Explorer) a TrustBroker Sign-On screen will be shown where they can enter their Active Directory domain user credentials. If configured, they can also use an X.509 Certificate on a Smart Card or in the Microsoft Certificate Store. 

Secure Single Sign-On for users of SAP Front-End Software on Mac OS X, e.g. SAP GUI for Java

A user can logon to a Mac OS X workstation using an OS X user account and password, and will be automatically authenticated using an Active Directory domain user account. They can then logon to SAP systems using SAP GUI for Java without being asked for any additional credentials. 

Secure Single Sign-On for ICF Services accessed using a Web browser on a Windows workstation

A user can logon to a Windows workstation using an Active Directory domain user account, then use a Web browser to logon to ICF Services (e.g. SAP Fiori Launchpad, Web GUI, CRM WebClient UI, SAP Business Client for HTML, BSP’s or WebDynbpro for ABAP applications), without being asked for any additional credentials. 

Secure Multiple Sign-On for ICF Services accessed using a Web browser on a Windows workstation

A user can logon to a Windows workstation using an Active Directory domain user account, or a local Windows user account (e.g. when using a shared workstation, or a workstation that is not joined to a domain). 

When they use a Web browser to logon to ICF Services (e.g. SAP Fiori Launchpad, Web GUI, CRM WebClient UI, SAP Business Client for HTML, BSP’s or WebDynbpro for ABAP applications), a TrustBroker Sign-On page will be shown where they can enter their Active Directory domain user credentials.