It can be desirable to have some or many users still be prompted for their AD username and password instead of true single sign on.
How can this be achieved?
There are two methods available for this depending on the installed version.
Resolution # 1
3.x version of the client will be required to use a batch script to signal a runas when it calls the client.
The QAS SAP client program link should be pointing to an application called saplogin or something like that. If so then the command could be put into a .bat file to be executed instead of the normal shortcut.
Pleae replace domain with the proper domain name and the username with the proper account.
>runas /netonly /user:domain\username "c:\pathtosaplogon\saplogon"
Resolution # 2
Newer version of the software take advantage of registry keys to make it simpler.On 32-bit machines:
HKEY_LOCAL_MACHINE\Software\Quest Software\SSO for SAP\Always Prompt
On 64-bit machines:
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Quest Software\SSO for SAP\Always Prompt