- on ▁for . ▁Pass words ▁can ▁be ▁different . ▁ ▁Web ▁browsers ▁need ▁to ▁be ▁configured ▁to ▁accept ▁cookies . ▁ ▁Any ▁web ▁servers ▁for ▁AB AP ▁servers ▁need ▁to ▁be ▁placed ▁on ▁the ▁same ▁DNS ▁ ▁C lock s ▁for ▁accepting ▁tick ets ▁are ▁synchron ized ▁with ▁the ▁issu ing ▁server ' s ▁clock . ▁ ▁The ▁issu ing ▁server ▁must ▁be ▁able ▁to ▁digit ally ▁sign ▁log on ▁tick ets ▁( i . e ., ▁public - key ▁and ▁private - key ▁are ▁required ). ▁ ▁Systems ▁that ▁accept ▁log on ▁tick ets ▁must ▁have ▁access ▁to ▁the ▁issu ing ▁server ' s ▁public - key ▁certificate . ▁ ▁Security ▁Fe atures ▁ ▁Dig it ally ▁signed ▁by ▁the ▁S AP ▁portal ▁server ▁ ▁Us es ▁asym metric ▁crypt ography ▁ ▁to ▁establish ▁un id irection al ▁trust ▁relationship ▁between ▁users ▁and ▁S AP ▁systems ▁ ▁Prote cted ▁in ▁transport ▁via ▁SSL ▁ ▁Valid ity ▁period ▁that ▁can ▁be ▁configured ▁in ▁the ▁security ▁settings ▁of ▁the ▁S AP ▁Enter prise ▁Portal ▁ ▁Security ▁Ch alleng es ▁ ▁S AP ▁Log on ▁T ick ets ▁do ▁not ▁util ize ▁Sec ure ▁Network ▁Communic ations ▁( S NC ) ▁ ▁Typ ical ▁security - related ▁issues ▁around ▁cookies ▁stored ▁in ▁a ▁web ▁browser . ▁Ex amples ▁include : ▁Copy ing ▁the ▁S AP ▁Log on ▁T icket ▁via ▁network ▁traffic ▁sn iff ing ▁or ▁social ▁engineering ▁and ▁storing ▁it ▁on ▁another ▁computer ▁for ▁access ▁to ▁the ▁S AP ▁Enter prise ▁Portal ▁