Matt,
Thank you for the helpful and detailed information. I now understand better how ABAP and JAVA stacks are used and how they communicate with each other. However, if we look at the user authentication, I assume that a user would login to the ABAP stack using a specific SAP user id and this user id is used as their identity when they sign an Adobe form. Is this correct ?
If above is correct, a customer using our SSO product which supports ABAP ICF services, can login to the Web Dynpro ABAP ICF service using Active Directory credentials and sign Adobe forms using the SAP user id which is mapped onto their Active Directory identity. It sounds like it could be very easy, but I am still not very sure where the certificate that is used for signing comes from. If anybody has any insight into this part, let me know.
Thanks
Tim