non-sap 利用sap 做 sso

I think that will lead you to the solution. In shot it uses SNC to establish a first RFC connection which is used to call the Function Module SUSR_CHECK_LOGON_DATA. The external Username has to be passed to this funciton module. The mapping of the external username to a SAP User has to be maintained in VUSREXTID. Then the Function Module will return a SSO2 Ticket that can be used to establish another RFC connection which then use the other users credentials. I think it should be straigt forward to rewrite my exampe i.e. in Java using SAP JCo.