FI Tickets

Hi All.,
Can anyone please send tickets raised in the FI module. it is so important for reference purpose 
it is very urgent.
Thanks & Regards,
Veeru
Moderator: Please, read and respect SDN rules

Hi Nageswar,
All the issues posted here are real time. You can pick any 5 of them which you can understand better with solution
Best Regards
Ashish Jain

Similar Messages

  • SSO to Non-SAP using login-tickets

    Hi all,
    I'd like to set up an SSO connection to a non-SAP HTTP system by using the SSO web filter (iis_sso.dll) on IIS 5.0.
    I've created an iView (using the application integrator) with the URL template : http://<ip-address-host>:82/reqvars.asp?<Authentication> in which <Authentication> is MYSAPSSO2=<Request.SSO2Ticket>. The reqvar.asp page comes with the web filter as an example and displays all HTTP header fields. That way you can check whether the user-ID has been extracted successfully from the SAP logon ticket. However, I fail to get any value into the REMOTE_USER variable. The ISAPI filter (iss_sso) has been installed (global) successfully.
    I'm using the following settings in the verify.properties files:
    remote_user_alias = REMOTE_USER
    pse_file = C:\SSOFilter\verify.pse
    application = portal
    log_file = C:\SSOFilter\filter.log
    log_level = 3
    Remark: in the original example the remote_user_alias is set to REMOTE-USER: However, I feel this is wrong since the actual variable is REMOTE_USER. Also I have seen this one in another forum post as being a working properties file. Or should I use original value?
    No entries are being written to the log so I believe nothing is happening at all.
    The SSOFilter folder contains the following files:
    iis_sso.dll
    sapsecu.dll
    sapsecu.lib
    verify.properties
    verify.pse
    mfc71.dll, mfc71u.dll, msvcp71.dll, msvcr71.dll and sapsecin.exe
    This folder also has been added to the environmental PATH variable.
    Any suggestions would be highly appreciated (and rewarded ,
    Frodo

    Hi,
    I dont have much info related but i can giv u hint
    refer OSS Notes 442401 and 723896.
    When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
    In the first case,  the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
    certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
    In the second case,  the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
    You can refer following link :-
    http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
    user authentication and SSO
    http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
    Authentication Using a Directory with SSO Integration Using Logon Tickets
    http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
    SSO
    SAP Logon Ticket-based Single Sign-On
    http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

  • How do I add multiple tickets under the same confirmation number from the American Airlines app to Passbook?

    I have a confirmation number from American Airlines for a flight with my family all under my name and for some reason I cannot add all of our tickets to Passbook. To clarify, I went to the American Airlines app and put in the confirmation number along with my name which pulled up my boarding pass only. Although I was able to add this boarding pass to Passbook, I was not able to add any of the other boarding passes for my children to Passbook that should have also been under the flight reservation. In fact I couldn't even see them in the American Airlines app. I tried to use their names and the same confirmation number but nothing happened, and nothing else seems to be working. How can I add all of these boarding passes to my Passbook?

    Fair enough.
    I started doing this before unlimited data and emails on phones was a common commodity, on my Samsung Blackjack.
    I then continued it due to its convenience. My only counter argument is this:
    Even when emails are set to immediately push, I am always notified earlier by this forwarding message (sometimes by several minutes/hours due to the fact that it is not dependent on my being connected to 4G or wifi to receive it.
    Also, to contradict snozdop's point that both methods use data and battery, I say this - when I use the forwarding method, the information comes in a pure text format and therefore uses considerably less information than an HTML and CSS rich email, with embedded images and such -also, unlimited text messages aids curve costs.
    I will, however, give this method a go. In any case, a solution to my original question would still be greatly appreciated.
    Thanks guys.

  • Transaction type not found while creation of service order/ticket

    Dear All,
    I had done all basic configuration of CIC but i am not able to create service order and service ticket.
    When i trying to create i am not able to find any transaction type but if i want to create follow-up document from CIC screen then i am able to create both the thing. I am not able to find out where is the  problem. can any body help me out.
    Thanks & regards
    Neeraj

    Hi Francis,
    Thanks
    I am on Interaction Center WebClient 2007.
    I have already done the configuration and Transaction type is popping up for selection screen but once i select the transaction type then system automatically canceled the transaction "Transaction Cancelled"
    But in the same time if i am trying to created follow-up transaction with reference to previous transaction then i am able to created service ticket/service order.
    what could be the problem?
    Regards
    Neeraj

  • Unable to authenticate with Ticket Toolkit

    I'm having trouble with the Ticketing Toolkit.
    (in a previous thread I was having trouble obtaining the MYSAPSSO2 cookie ... that is thankfully resolved)
    I am now able to see the cookie but for some reason the IsAuthenticated flag isn't set when I run the app by clicking "Preview" from the associated iview. Consiquently Identity.Name isn't set + The Authentication Type is blank as well.
    I've played around with the web.config as well as the virtual directory on IIS; changing the Authentication Mode from "Windows" to "None", enabling Windows authentication and disabling anonymous user authentication .... and every permutation you can think of  .... nothing seems to work.
    One interesting note is that the wpsso_v3.dll doesn't seem to be called ... I tried renaming it just to see if it generated an error and it didn't make any difference.
    Also, I had to physically make a reference to the assembly SAP.web.security for the app to build.  The artcle on the toolkit didn't indicate that I would need to do that and I would have thought the registration in the web.config would have taken care of that.
    My web.config is as follows:
    <?xml version="1.0" encoding="utf-8" ?>
    <configuration>
    <configSections>
    <sectionGroup name="system.web">
       <section name="MySAPSSO2"
         type="SAP.Web.Security.MySapSso2SectionHandler, SAP.Web.Security, Culture=neutral, PublicKeyToken=50436dca5c7f7d23, Version=1.0.0.0"/>
       </sectionGroup>
    </configSections>
      <system.web>
        <httpModules>
       <add type="SAP.Web.Security.MySapSso2AuthenticationModule, SAP.Web.Security, Culture=neutral, PublicKeyToken=50436dca5c7f7d23, Version=1.0.0.0" name="MySAPSSO2"/>
      </httpModules>
      <MySAPSSO2 PseFilePath="C:InetpubwwwrootSSO Ticket TestpseFilesverify.pse" />
        <!--  DYNAMIC DEBUG COMPILATION
              Set compilation debug="true" to enable ASPX debugging.  Otherwise, setting this value to
              false will improve runtime performance of this application.
              Set compilation debug="true" to insert debugging symbols (.pdb information)
              into the compiled page. Because this creates a larger file that executes
              more slowly, you should set this value to true only when debugging and to
              false at all other times. For more information, refer to the documentation about
              debugging ASP.NET files.
        -->
        <compilation
             defaultLanguage="c#"
             debug="true"
        />
        <!--  CUSTOM ERROR MESSAGES
              Set customErrors mode="On" or "RemoteOnly" to enable custom error messages, "Off" to disable.
              Add <error> tags for each of the errors you want to handle.
              "On" Always display custom (friendly) messages.
              "Off" Always display detailed ASP.NET error information.
              "RemoteOnly" Display custom (friendly) messages only to users not running
               on the local Web server. This setting is recommended for security purposes, so
               that you do not display application detail information to remote clients.
        -->
        <customErrors
        mode="RemoteOnly"
        />
        <!--  AUTHENTICATION
              This section sets the authentication policies of the application. Possible modes are "Windows",
              "Forms", "Passport" and "None"
              "None" No authentication is performed.
              "Windows" IIS performs authentication (Basic, Digest, or Integrated Windows) according to
               its settings for the application. Anonymous access must be disabled in IIS.
              "Forms" You provide a custom form (Web page) for users to enter their credentials, and then
               you authenticate them in your application. A user credential token is stored in a cookie.
              "Passport" Authentication is performed via a centralized authentication service provided
               by Microsoft that offers a single logon and core profile services for member sites.
        -->
       <authentication mode="Windows" />
         <!--  AUTHORIZATION
              This section sets the authorization policies of the application. You can allow or deny access
              to application resources by user or role. Wildcards: "*" mean everyone, "?" means anonymous
              (unauthenticated) users.
        -->
        <authorization>
          <allow users="*" />      <!-- Allow all users -->
                <!--  <allow     users="[comma separated list of users]"
                                 roles="[comma separated list of roles]"/>
                      <deny      users="[comma separated list of users]"
                                 roles="[comma separated list of roles]"/>
                -->
          <!-- <deny users="?" /> -->
        </authorization>
        <!--  APPLICATION-LEVEL TRACE LOGGING
              Application-level tracing enables trace log output for every page within an application.
              Set trace enabled="true" to enable application trace logging.  If pageOutput="true", the
              trace information will be displayed at the bottom of each page.  Otherwise, you can view the
              application trace log by browsing the "trace.axd" page from your web application
              root.
        -->
        <trace
            enabled="false"
            requestLimit="10"
            pageOutput="false"
            traceMode="SortByTime"
              localOnly="true"
        />
        <!--  SESSION STATE SETTINGS
              By default ASP.NET uses cookies to identify which requests belong to a particular session.
              If cookies are not available, a session can be tracked by adding a session identifier to the URL.
              To disable cookies, set sessionState cookieless="true".
        -->
        <sessionState
                mode="InProc"
                stateConnectionString="tcpip=127.0.0.1:42424"
                sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes"
                cookieless="false"
                timeout="20"
        />
        <!--  GLOBALIZATION
              This section sets the globalization settings of the application.
        -->
        <globalization
                requestEncoding="utf-8"
                responseEncoding="utf-8"
       />
    </system.web>
    </configuration>
    I am afraid that I am running out of ideas ... anyone have some suggestions?
    -Sheldon

    Turns out that this was another variation on on Mark Dohrmann's post "Problem's known with NW2004s SP11 and Ticket Toolkit"
    Problems known with NW2004s SP11 and Ticket Toolkit?
    just had to convert the ticket string and feed it back into the cookie before passing to the toolkit.
    ie.
    this.Request.Cookies["MYSAPSSO2"].Value = HttpUtility.UrlDecode(this.Request.Cookies["MYSAPSSO2"].Value);

  • How to log a query or ticket to SAP on SAP support Portal - need process

    Dear All,
    I got SAP support portal user id and password. Can anybody guide me how to log a ticket or query on some issue to SAP.
    Pls let me knwo how to search help notes to. Explain me in steps pls.
    Need urgent help.
    Thanks
    Sunnzy

    Hello exper,
    Can you tell me that incase i have to log a request for a client server then how i will do that.
    I am simply facing a problem in PPOME transaction where a tab for IT 1005 planned compensation has been added but it is not showing any input fields there. However we tried the same configuation in Sandpit server and it is working fine.
    Incase i have to log this is to SAP for help, do i have to follow the same path to do it.
    thanks
    Sunny

  • SAP GUI & logon tickets

    We're setting up a bunch of iViews in our portal to provide transparent single-sign on to all our backend SAP systems.  They run on Unix, so we'd need to purchase a third party product to do it directly with SAPGUI.  I'm wondering if there's a technical reason why the SAP GUI client couldn't perform a standard NT authentication and then use logon tickets to grant backend access like the Portal does, assuming the userids are the same (I realize there's no place in SAPGUI to do user mapping if they're not).
    Just curious.  It would be a great way to provide single signon to SAP systems regardless of the server platform.
    Thanks,
    Rich

    Hi Sanjay,
    actually there was a handson given two years ago, exactly showing this on teched.
    You may be able to find the contents at
    elearning:     https://www.sdn.sap.com/sdn/elearning.sdn?class=/public/eclasses/teched04/SCUR251.htm
    presentation: https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/single%20sign-on%20in%20heterogenous%20landscapes.pdf
    This setup is used by some customers also to get an improved version of the SAP logon pad
    Please be aware, that this only covers SSO to the SAP Gui connected system but not encryption.
    Kind regards,
    Patrick

  • Service Desk Mail - Modify the subject -adding ticket number and descriptio

    Hello,
    I have activated the automatic sending of email when a new ticket arrives into the Service Desk. I am using the standard notifcation smartform  However all the mails arrive in the inbox with the same subject, so no possibility of making a quick identification of the ticket.
    I heard that is possible to add additional fields in the subject of the mail using some "&" parameters.  However I do not have a clue where to modify and what type of & parameters are available.  Is that I need to copy and modify the smart form somewhere??
    I appreciate your inputs.
    Regards
    Esteban Hartzstein

    Hi Esteban,
    The subject line corresponds to the name of the smart form that you can maintain in the "description" field in the sap form builder. you can add dinamyc parameters to the subject by using the placeholder "&". e.g.: & | Action Required.
    On se24, copy the class CL_DOC_PROCESSING_CRM_ORDER into the customer workspace (ZCL_DOC_PROCESSING_CRM_ORDER). then edit it and navigate to line 185 and change the following:
    REPLACE '&' WITH ls_orderadm_h-object_id INTO ls_output_options- tdtitle.
    Other example to use as subject:
    Object ID + Priority + Description
    Field description value: &1 | &2 | &3
    On the class:
    REPLACE '&1' WITH ls_orderadm_h-object_id INTO ls_output_options- tdtitle.
    REPLACE '&2' WITH ls_activity_h-priority INTO ls_output_options- tdtitle.
    REPLACE '&3' WITH ls_orderadm_h-description INTO ls_output_options- tdtitle.
    More information on this on the book: SAP Solution Manager Service Desk - Functionality and Implementation
    Hope I can help.
    Regards,
    Ricardo

  • SSO to non SAP Application using SAP Logon Ticket

    Hi Experts,
    I Have EP 7 SP 15 using SPNego Wizard to SSO with Active Directory and SSO between EP and ECC using SAP Certificates.
    Now I have a demand to SSO some JAVA based applications (non SAP) to my portal using the SAP Logon Ticket.
    I Have followed some blogs that directed me to use SAPSSOEXT (some libs) to read the MYSAPSSO2 cookie. The problem is that I didn't found this cookie, I even executed the command javascript:document to look for this cookie but the browser just show me the JSESSIONID info.
    Does anybody knows where I can find this cookie or if there's a better way to set up this SSO? It´s necessary to say that I cannot SSO these application to the kerberos protocol because some security reasons on my company.
    Thanks
    Armando

    Hi,
    I dont have much info related but i can giv u hint
    refer OSS Notes 442401 and 723896.
    When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
    In the first case,  the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
    certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
    In the second case,  the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
    You can refer following link :-
    http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
    user authentication and SSO
    http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
    Authentication Using a Directory with SSO Integration Using Logon Tickets
    http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
    SSO
    SAP Logon Ticket-based Single Sign-On
    http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

  • SSO logon tickets not working in two different OS

    HI All,
    We have sucessfully implemented SSO logon tickets concept to access a j2ee application through portal on windows OS.
    We could able to do the samething on two j2ee instances installed on two different machines on same domain. I mean, deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance thru SSO logon ticket by adding some configuration steps in Visual administrator given in help.sap.com. This also we did in same OS windows.
    But now the problem is, when we try to implement the above scenario in two different OS, say application is deployed on HPUX machine, and accessing that application through Portal from Solaris machine, SSO logontickets is failing. Means we couldnt able to access the application. Both the OS are in same domain only.
    What extra configuration steps need to be done in VA, to get work with two different OS?
    Please share ur ideas.
    Regards,
    Satish.

    Hi..
    I guess probabaly the internet explorer doesnot accept the sso ticket.
    What you can probably check is that the compatability of explorer for the solaris and HP UX os with Windows OS.
    Also,please check whether the SSO ticket is getting populated and What error are you getting exactly when the SSO fails and that will give some idea to proceed further
    <u>deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance[/u
    What the above mean...how are you deploying ?? what tool ?? which J2EE instance out of the two ??
    Thanks
    Gopal

  • SSO using Kerberos with SAP Logon Tickets

    Hi,
    I am creating a Repository Manager for the Portal Knowledge Management System and I want to use SSO to a backend IIS application and I have a few questions here. 
    I have a three tiered architecture. 
    A.  The presentation tier (SAP Portal which has my Repository Manager implementation)
    B.  ASP.NET web service data layer.
    C.  Backend document management system which runs on IIS. 
    I have installed the ISAPI filter on my ASP.NET application server and have enabled this HOST account for delegation in MSAD 2003.   Server B will use Kerberos constrained delegation to access Server C, which is an IIS backend server. 
    My question is how do I pass an SAP Logon Ticket to an ASP.NET web service request from my Repository Manager implementation?  Basically how do I just make an HTTP request to an ASP.NET application from some portal iView or WebDynPro code and pass along the SAP Logon Ticket in the request so it can be interpreted by the ISAPI filter on the IIS server.  Does anyone have any sample code or an application here that does this?
    Thanks,
    Scott

    Hi Scott
    Did you managed to find out anything regarding how to pass SAP Logon ticket to ASP.NET Webservice. Can you share it with me?
    regards
    ram

  • SSO with Logon Ticket to non-SAP Unix based application

    Hi all,
    Anyone has implemented SSO with Logon Ticket to a Unix box ?
    We need to achieve Single Sign On between our EP5.0 SP5 Portal and a third-party web application with a front-end on a Unix AIX machine with Apache.
    We achieved SSO with non-SAP applications with Logon Tickets, but one was to an IIS system in another domain (we therefore used the standard Web Filter for IIS and declared it in usermanagement for cross-domain support) and another one running on Windows platform (we used the C libraries provided in the "Logon Ticket Toolkit": NT or Linux only).
    From what we understand and found on the web sites, we cannot reuse any standard web filter (none for Unix, am I correct ???) and want to implement custom code using SAP libraries, if possible using Java
    -> Are there any Java libraries that are available to both:
    . verify the logon ticket with the deployed Portal public key
    . decrypt/extract the authenticated username from this ticket ??
    I've seen a mention of Java libraries, and Unix, in a SAP EP 6.0 document but I'm not sure where to find them...
    Is the SAP Logon Ticket issued the same way in EP 5.0 and EP 6.0 ?
    I managed to find something called SAPSSOEXT, for AIX, which contains some partial library and a sample, but it is dated 2000 !! Anyone has more information about this ?
    Any hint is very much appreciated.
    Thanks a lot
    Olivier

    Check these links for reference regarding AIX and Apache using X.509 certificates:
    http://publib16.boulder.ibm.com/pseries/en_US/aixbman/security/cas_pki.htm
    And just using cookies -
    http://forums.devshed.com/archive/t-105611 (perl based)
    You can also use mod_ssl built into your Apache to facilitate both certificate based authentication as well as encryption.
    The mod_ssl route is most secure (because of the encryption), the IBM link is comprehensive but requires extra infrastructure (LDAP).
    Nick
    Nick

  • SSO Help - Portal to ABAP via logon tickets

    Hi All,
    I've done this configuration in the past but it seems that the process has changed a bit and I'm in need of some advice.
    I have a portal system which I've setup SSO. The SSO is done through Kerberos and the users are pulled from LDAP. Users login to their windows account, they hit the portal without having to login again, perfect. I used the new SPNego setup wizard to do this.
    Now the issue I'm having. Portal user ID's are not the same as ABAP ID's. I have used a blank attribute in Active Directory (specifically "extensionAttribute7") to fill in the ABAP user ID's. I have modified the data source XML file in the portal to look like this:
    <nameSpace name="$usermapping$">
    <attributes>
    <attribute name="REFERENCE_SYSTEM_USER">
    <physicalAttribute name="extensionAttribute7" />
    </attribute>
    </attributes>
    </nameSpace>
    I have changed the UME property to look like this:
    ume.usermapping.refsys.mapping.type = attribute
    When I try to access an SAP report through the portal I get the error:
    The initial exception that caused the request to fail was:
    Ticket contains no / an empty ABAP user ID (see note 1159962)
    My ABAP system is setup to create and accept logon tickets. Certificates have been exchanged on both systems (checked through NWA). It looks like the saplogonticket isn't picking up the ABAP user ID that I've stored in AD and mapped to in the XML file.
    In the Java system, my logon ticket stack looks like this:
    EvaluateTicketLoginModule SUFFICENT
    SPNegoLoginModule OPTIONAL
    CreateTicketLoginModule SUFFICENT
    BasicPasswordLoginModule REQUIRED
    CreateTicketLoginModule REQUIRED
    Can anyone see an obvious step that I'm missing? Any tips would be appreciated.
    Portal system is running 7.01 sp8
    ABAP is running 7.01 sp8
    Cheers,
    Richard

    Hi Arjun,
    No I'm not using user mapping. I want to pass my ABAP user ID from an attribute I'm using in Active Directory. For some reason the sap logon ticket isn't picking up my username from the attribute when I try to go from portal to ABAP.
    Hi Samarth,
    Not sure I understand the request. The user is coming from the portal and is attempting to run a ABAP report from the portal. The user names are not the same. I am attempting to map the ABAP user ID to an Active Directory attribute that I can pass to the sap logon ticket.
    Hi Siva Kumar,
    Yes I checked the VA as well, the entries are there.
    Thanks all for the suggestions. Keep them coming if you have more, they are greatly appreciated.
    I basically followed this from SAP to set it up
    http://help.sap.com/saphelp_nw70ehp1/helpdata/en/0b/d82c4142aef623e10000000a155106/frameset.htm
    You are using an LDAP directory as a data source for the User Management Engine (UME). The user IDs for ABAP systems are already available in the LDAP directory. You no longer need to define a user mapping for each user, as the data is already available in the LDAP directory.
    Cheers,
    Richard

  • SSO to SAP R3 thru ITS 6.20 with Logon tickets

    Hi All,
    I am trying to configure SSO to R3 thru ITS with the Logon Tickets.
    I have configured R3 to accept the tickets using STRUSTSSO2.
    Downloaded the verify.der file from Portal and imported to R3
    And tried to test the System connection.
    If I use <b>SAP GUI for Windows</b>,the logon ticket is passed and SSO happens
    with out any problem.
    But If I use <b>SAP GUI for html</b>,then ITS Logon screen appears and once I
    enter the user id and password it logs in.
    In ITS global.srvc file I have added the following parameter
    <b>~mysapcomusesso2cookie 1</b>
    I also have the following parameters in the global.srvc file
    <b>~login <space>
    ~password  <space></b>
    Do I need to configure any thing more in ITS.
    Where am I going wrong.
    I have read regarding <b>Pluggable Authentication Service(PAS)</b>.Is this mandatory for SSO thru ITS
    Please let me know
    I am working on EP6 SP14
    Any help is really appreciated
    Thanks in advance
    Regards,
    Santhosh

    Hi,
    IWithin System definition of R/3 System, you've to give the FQDN of ITS just same as Portal system. For example if your Portal system's FQDN is below:
    http://portal.hedehode.com:50000/irj
    then the ITS Server definition (parameter ITS Hostname) must be:
    itsserver.hedehode.com:port
    for portal to resolve itsserver.hedehode.com host, you may need to enter its IP address into hosts (c:\windows\system32\drivers\etc\hosts) file of portal system.
    <ip>   itsserver.hedehode.com

  • How to implement SSO to non-SAP systems using SAP logon ticket?

    Hello,
    We would like to implement Single Sign On between our SAP Netweaver system and a Siebel which is a non-SAP system using SAP logon tickets.
    Can anyone please give me some leads on this, in particular:
    1. Is there a JAVA API or an SAP plug-in that can be implemented on the Siebel machine to extract the SAP logon ticket?
    2. As the other machine might seat on a complete different domain, is it possible to implement SAP logon ticket without using cookies (perhaps through the HTTP header?
    3. In case you think using SAP logon tickets is not the best solution here I would be happy to hear any other suggestions you might have.
    Roy

    Hi,
    I'm currently using SAML as well. Unfortunately the SAP J2EE cannot work as authority (identity provider) but what you can do is using an open implementation of SAML such as opensso which is an open version of SUNs Java System access manager.
    There are a couple of other projects such as opensaml, apache's wss4j or shibboleth that might be interesting in this context.
    I just installed opensso and got it working with SAP J2EE 7.0 using SAPs JAAS SAMLLoginModule to authenticate users within SAP J2EE.
    In this scenario opensso serves as identity provider just as you need! There are a couple of Policy agents available on SUNs Download site you can use with Apache, Tomcat, JBOSS, WebSphere, Bea Web Logic etc. in order to authenticate! Otherwise you just directly authenticate against opensso. When installing opensso you can configure the type of user store you want  to use! By default it uses LDAP but you can also use different types of user store using JDBC or other mechanisms. Since you have a Directory Service you could easily connect it to your existing directory.
    There is also a way to map user ids directly in opensso by adding a uid mapping class. I created some documentation with lots of screenshots about using opensso with SAP J2EE. You can easily use opensso with any other system that supports SAML. In the case of SAP the usage is currently limited to SAML versions 1.0 and 1.1. Version 2.0 is not yet supported but should be in one of the following versions.
    Here are some links you might want to check:
    OpenSAML: https://spaces.internet2.edu/display/OpenSAML/Home
    wss4j: http://ws.apache.org/wss4j/
    shibboleth: http://shibboleth.internet2.edu/
    opensso: https://opensso.dev.java.net/
    On SDN you will find a documentation on how to connect SUN Java System Access Manager to SAP J2EE (see https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/906d9fc6-31b9-2910-1385-90edad7d7570). As I said opensso is based on the SUN Access Manager code and looks quite the same. So you can adapt this documentation in order to configure opensso or you can just ask me for the documentation.
    Hope this is helpful...
    Let me know if you need further assistance on this topic
    Cheers

  • SSO to Web Service using SAP Logon Ticket

    Hi,
    I have to do SSO using SAP Logon Ticket between my portal and a Java Web Service that is accessible over internet. I do have the WSDL file of this Web Service.
    I want to know:
    1. What changes are required in Web Service to configure it to read and accept Logon Ticket?
    2. What am I supposed to do at portal end to enable this process?
    Thanks,
    Vivek

    Hi Vivek & Raja,
    > is it that if the WS is a third party WS and running on a Non-SAP J2EE Server,
    > we can't implement SSO from Portal to it using SAP Logon Ticket?
    Right, if you cannot extend it's functionality, how should it do the ticket verification...
    @Raja:
    > SAP Logon Ticket is for authenticating to a SAP system, since yours in a
    > thirdparty ws, there is not need of SAP logonticket.
    On the other hand, that's not true. It is possible as well as often done to verify the SSO ticket on some third party system. This is also supported, for Java as well as for other systems, different articles about such scenarios have been published, also here on SDN.
    Hope it helps
    Detlev
    PS: Vivek, please consider rewarding points for helpful answers on SDN. Thanks in advance!

Maybe you are looking for

  • How to restrict  delivery Block in va02 for various users

    Dear  Experts I am suppose to restrict the user depening on delivery block in transaction VA02 .There are no SAP pre-defined feilds  authorization Object to restrict at delivery block level from PFCG ,and I have Created manually authorization object

  • Upgraded to 10.3.9 and now Safari won't open, lil help pls

    I finally took the big step and upgraded from 10.3.8 to 10.3.9, did all the right things, disconnected my FW External HD, ran Cocktail, ran disk utility, repaired permissions; BUT, since I've completed all the updates and the 10.3.9 upgrade, I cannot

  • Delete values for a range

    Hi ,      I want to delete records only for a given range. Below is the script it deletes the records based on the given MP range. And in this Switch table screen shot i have a switchID and ControlPointID column as main reference . For the given rang

  • I need help with creating PDF with Preview...

    Hello I need help with creating PDF documetns with Preview. Just a few days ago, I was able to create PDF files composed of scanned images (notes) and everything worked perfectly fine. However, today I was having trouble with it. I scanned my noteboo

  • Xi sending the IDOC to R/3: Error

    Hi I am sending the idoc from XI, i am getting following error "  <SAP:Code area="IDOC_ADAPTER">ATTRIBUTE_WRONG_INTF</SAP:Code>". Kindly let me know have i done anything wrong in configuration in XI and r/3 for posting IDOC.   <?xml version="1.0" enc