Certified:  June 17, 2025 

Solution Summary

This article describes SAP NetWeaver integration with RSA ID Plus. Use this information to determine which use case and integration type your deployment will employ.

Use Case

SAP NetWeaver can be integrated with Cloud Access Service (CAS) using SAML 2.0. When integrated, SAP NetWeaver users must authenticate with RSA to sign in to SAP NetWeaver.

Integration Types

My Page SSO provides Single-Sign-On (SSO) to SAP NetWeaver users leveraging RSA self-service portal My Page. Both SP-initiated SSO and IdP-initiated SSO are supported. Modern Cloud-hosted SSO with My Page replaces the existing SAML SSO support with the IDR. Existing SSO integrations using IDR My Applications continue to be supported and will be listed in this document as applicable.

Note: RSA will continue to maintain existing SAML SSO integrations using IDR My Applications. At a to-be-determined future date, RSA will announce the end-of-life (EOL) date for the SAML SSO support with the IDR. For more information Available Now: My Page SSO Enhancements.

Relying Party integrations use SAML 2.0 to direct users’ web browsers to CAS for authentication. With Relying Party integration, CAS can manage either additional authentication only or both primary authentication (for example, user ID and password) and additional authentication, depending on the service provider's capability. Internal Applications and/or Identity Management System - When integrated, users must authenticate with RSA ID plus to create sessions to internal applications and/or identity management system using adapters. Bridge between RSA ID Plus SAML IdP and Partner Service Providers - When integrated, users must authenticate with RSA ID plus to create sessions to partner Service Providers using authentication policy contracts.

Supported Features

This section shows all of the supported features by integration type and by ID Plus component. Use this information to determine which integration type and which RSA ID Plus component your deployment will use. The next section in this guide contains the steps to integrate RSA ID Plus with SAP NETWEAVER for each integration type.

SAP NetWeaver Integration with CAS

Authentication Methods	RSA MFA API (REST)	RADIUS	Relying Party	SSO
Approve	-	-
LDAP Password	-	-
SecurID OTP	-	-
Authenticate OTP	-	-
Device Biometrics	-	-
SMS OTP	-	-
Voice OTP	-	-
FIDO Security Key	-	-
QR Code	-	-
Emergency Access Code	-	-

SAP NetWeaver Integration with Authentication Manager (AM)

	Supported
-	Not supported
n/t	Not yet tested or documented, but may be possible
n/a	Not applicable

Configuration Summary

This section contains instruction steps that show how to integrate NetWeaver with RSA for cloud administrators using all of the integration types.

This article is not intended to suggest optimum installations or configurations. It is assumed that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators should have access to the product documentation for all products to install the required components.

All RSA and Microsoft SharePoint 2016 components must be installed and working prior to the integration.

Integration Configuration

CAS 

• SAP NetWeaver - SAML My Page SSO Configuration - RSA Ready Implementation Guide
• SAP NetWeaver - SAML Relying Party Configuration - RSA Ready Implementation Guide

RSA Terminology Changes

RSA is introducing new consistent terminologies across all products and platforms. Refer to the following table for the list of old and new terminologies. 

Certification Details

CAS 

RSA My Page

SAP NetWeaver

Known Issues

No known issues.