SSO to Microsoft backend systems in extranet scenarios is limited to the user id password mechanism. However, Kerberos does not work well over the internet due to the typical configuration of client-side firewalls.
Microsoft web-based applications usually only support the authentication methods basic authentication or windows integrated authentication (Kerberos) provided by the Internet Information Server. Single sign-on to Microsoft web applications
SAP provides Java and C sample files that can provide some hints how the library can be implemented in the source code of a high level programming language such as Visual Basic, C or Java.
SAP provides a Web Server Filter that can be used for an authentication via http header variable and a Dynamic Link Library for verifying SSO Tickets in 3rd party software which can be used to provide native support for SAP Logon Tickets in applications written in C or Java. SAP Logon Tickets can be used for single sign-on through the SAP Enterprise Portal.
3.5 Single sign-on to non-SAP Java environments.3.4 Single sign-on to Microsoft web applications.3.2 Integration with identity and access management platforms.