3351213 - How to Download and Setup Certificate-Based Logon

This document describes how to setup certificate-based authentication to log into Business ByDesign without entering user and password.

SAP Business ByDesign

1. Download the root and intermediate certificates of SAP Business ByDesign tenant.
   1. On the login page, click on the locker icon on the left of the tenant URL (on Google Chrome and Microsoft Edge).
   2. Click on "Connection is Secure".
   3. Click on "Certificate is valid".
   4. Go to the Details tab.
   5. Choose the root certificate.
   6. Click on the Export button.
   7. Save the file to local machine.
   8. Do the same for the intermediate certificate.
2. Install the root and intermediate certificates of SAP Business ByDesign in the browser to establish a security connection between ByD tenant and the browser.
   1. On the right of the URL, click on the three dots icon (on Google Chrome and Microsoft Edge).
   2. Click on Settings.
   3. In the Privacy and security section, click on Security.
   4. Click on Manage Certificates. A new window will appear.
   5. Navigate to the Trusted Root Certification Authorities tab.
   6. Click Import.
   7. In the opened window, click Next.
   8. In the new screen, open the root certificate downloaded in step 1 (note: set the file explorer to display all formats).
   9. Proceed until the end of the installation.
   10. Navigate to the Intermediate Certification Authorities tab in Manage Certificates.
   11. Repeat the step f to step i to install the intermediate certificate downloaded in step 1.
3. Assign personal certificate in the Business ByDesign tenant. The certificate used in this step is separated from the certificates downloaded in step 1 and 2. The prerequisite of certificate logon is that a personal certificate from SAP trusted entity has been installed in the Personal tab of Manage Certificates.
   1. Log with the user and password in the tenant.
   2. Click on the avatar icon.
   3. Click on My Settings.
   4. Click on the button Manage Certificates.
   5. Click on the button Assign Logon Certificate.
   6. On the new page, click on Continue.
   7. After the process is completed, restart your browser.

After this setup, it will be possible to login Business ByDesign tenant without entering user and password. It is worth noting that this is a local setup, so the same process needs to be carried in other machines if needed.

SSO, SSL, certificate , KBA , SRD-CC-IAM , Identity & Access Management , How To