How can I authenticate users against a WAS system from third-party app?

We are looking at developing a third-party standalone web application e.g. in Rails (but it could be on any framework for that matter).
How would we go about authenticating users against a SAP WAS backend? Are there some standard web services for this? What other means are there for authentication?
Kind Regards,
Martin

From the comment in SUSR_LOGIN_CHECK_RFC you just need to pass user name and it will return if user can still log on. Only your system will know credentials for this user so an attacker won't be able to use this service for cracking passwords.
This FM is in the same function group as:
CREATE_RFC_REENTRANCE_TICKET
SUSR_CHECK_LOGON_DATA
SUSR_DELETE_OWN_PASSWORD
SUSR_GENERATE_PASSWORD
SUSR_GET_ADMIN_USER_LOGIN_INFO
SUSR_GET_X509CERT_MAPPING_LIST
SUSR_LOGIN_CHECK_RFC
SUSR_USER_CHANGE_PASSWORD_RFC
SUSR_USER_EXTID_DEL
SUSR_USER_EXTID_GET
SUSR_USER_EXTID_GET_ALL
SUSR_USER_EXTID_LOOKUP
SUSR_USER_EXTID_RENAME
SUSR_USER_EXTID_SET
SUSR_USER_EXTID_SET_ALL
SUSR_USER_FROM_CERTIFICATE_RFC
SUSR_USER_SETEXTID
You would need to ensure that only the service exposing the "login check" can be called, and not the FM's in the group.
BTW: SAP Java WAS can provide SAML 2.0 assersions (technically a component shipped with IdM, but you don't have to use the rst of the IdM if you don't want to..). If your applications are all web enabled ones (WDA?) then that is an option to consider, which is also strategically supported.
SSO2 Logon tickets are not really a strategy anymore... and installing a double-stack system on all ECC sytems just to have SAML is not strategic either..
I have heard several wishes for SAML authentication for SAPGui, but not seen anything official yet in that direction.
Cheers,
Julius

Similar Messages

How can I Downgrade to Snow Leopard and keeping all 3rd party apps?

New to MacBookPro and really happy. With Lion...not so much. I want to downgrade to SL, however, apparently I must reformat the hard drive. Here´s the real question: If I have a backup of my entire HD with the user, docs and all the apps I have installed (on Lion), once I downgrade to Snow Leopard, can I just move all my apps from the back up disk I have made of my Lion-Running hard drive? In other words, How can I downgrade without having to reinstall every single third party app I have?

First, how new is this Mac? A Mac as a rule cannot boot to an older operating system version than that with which it was originally supplied. In other words, if this is a new MBP that came with Lion then you probably cannot get it to boot to SL.
Some applications (and I take it you do mean full "applications" rather than "apps" which are mobile device programs -- it helps to be clear o terminology) can just be dragged from place to place. Others, notably Adobe and Office, install things all over the place and unless you are good at finding hidden files with obscure names in 10 different places you will just have to re-install them.

HT4528 How can I see if a picture was sent from my phone? I am not sure the number it was sent to, it may have been an i-phone. I just want to know if someone sent themselves a pic from my phone....

How can I see if a picture was sent from my iPhone? I am not sure the number the picture(s) was sent to..and whether or not it was an iPhone...I just want to know if someone sent themselves pics from my phone. Aside from a court order to obtain data message info, any ideas? Any info is greatly appreciated.

by email?
by mms?

HT1766 How can I retreive a video that was deleted from my iphone??

How can I retreive a video that was deleted from my iphone??

If it was a video taken on your iPad, and if you have it backed up from the last time you did an iTunes (or iCloud) backup, then yes, you can restore your iPad using that backup.

How can i see which Apple ID was used to download an app?

how can i see which Apple ID was used to download an app, cause i cant remember, thanx

Hi maikeru1,
If you have your apps synced to iTunes, you can use a similar process to that outlined in the following article (the Get Info command) to show what Apple ID it was purchased under:
Apple Support: Recovering a forgotten iTunes Store account name
http://support.apple.com/kb/ht1920
Regards,
- Brenden

Where can i complaint about a Developer imposture for a third party app that i have already purchased?

Where can i complaint about a Developer imposture for a third party app that i have already purchased?

I'm not sure what you mean by a "developer imposture", but if you are having a problem with an app that the app's developer cannot or will not assist with, go here:
http://www.apple.com/support/itunes/contact/
and follow the instructions to report the issue to the iTunes Store.
Regards.

How do I get my browser to accept cookies from third party sites

how do I get my browser to accept cookies from third party sites. I tried going into safari/preferences/security/accept cookies always. and it still will not work

Use Firefox.

How can I take out my credit card number from purchasing anymore app

How can I take out my credit card number from the App Store to prevent purchasing anymore apps

How to Get Apps From the App Store Without a Credit Card
http://ipadhelp.com/ipad-help/how-to-get-free-apps-from-the-app-store-without-a- credit-card/
Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card
http://support.apple.com/kb/ht2534
Why can’t I select None when I edit my payment information?
http://support.apple.com/kb/ts5366
If None is not available - On your computer launch iTunes and click “iTunes Store” in the left navigation pane. Click the “down arrow” next to your name at the top right side of the page and click “Account.” Enter your username and password and click “View Account” to log into your account information. Next to your Payment Type, click “Edit.” Select the “None” button and click “Done.” Confirm that your card has been removed by returning to the Apple account information screen. Under Payment Type, it should say that there is no credit card on file.
iTunes Store: Changing your payment information
http://support.apple.com/kb/HT1918
iTunes Store Accepted Forms of Payment
http://support.apple.com/kb/HT5552
 Cheers, Tom

How can we Authenticate the Application by Using OAuth Protocol in IPhone App

I want to create an application where i want to use OAuth protocol,like i want to communicated with the application like facebook from my application..
How can i do it?

You have a better chance of getting your question answered in the Developers Forum.
Suggest you repost there:
Developer Forums

How can I restore a contact which was deleted from Contacts?

I opened Contacts on OS X 10.9.1. I noticed there was a duplicate contact. I deleted the duplicate, then added some information to the remaining copy of the contact. I closed contacts. When I returned a few minutes later, the remaining copy was also gone, now I would like to restore it, but there is no information on how to do that.
Thanks

What if it was synced - either to iCloud or iTunes (I'm not sure which one I backed up to) after the video was taken? How do I recover it? I have synced/backed-up my iPhone 4 since the video was deleted from my device. Is it still recoverable? Thanks.

How can I recover a video which was deleted from the iPhone 4? It was not synced before deletion.

iPhone 4
Not synced, deleted a video from the phone.
Is there a way to recover the video?

What if it was synced - either to iCloud or iTunes (I'm not sure which one I backed up to) after the video was taken? How do I recover it? I have synced/backed-up my iPhone 4 since the video was deleted from my device. Is it still recoverable? Thanks.

How can I grant users to access/modify system folders (C:/Windows/Fonts) by using GPO in Win7 ?

In our company there are some folks that require often new fonts that they take from the internet. Unfortunately, some of them have offices on in a diferrent country, so going there to insert my admin paswoord is not a solution.
If you copy the ttf file into the C:/Windows/Font folder is enough, you don't have to also add the registry.
One way to bypass the window that asks for admin credentials is to insert my crdentials into the bat file (runas). But this is very unsecure, as I am an administrator.
Is there a way to create a shared folder that can also store fonts that can be used by windows? Can I give them the right to modify files in this folder without making them administrators? Or do you see any solution to this issue? Any help would
be greatly appreciated.
Thank you in advance.

Another solution which will not compromise your security is to create a share folder and have the users to download fonts to the folder. After that a simple schedule task GPO on clients to copy the
*.ttf files from the folder to the C:\Windows\Fonts folder. Since tha task can be run by administrative privileges I guess there will be no problem.
Regards.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer
or to mark this post as
and helpful to other people.

How do I get refunded for the purchase of a third party app?

I have purchased an app called crestron mobile pro on Saturday 2-15, when I actually needed the crestron mobile pro g version. How do I get refunded for the wrong version of the app, which I don't need anymore?

All purchases are considered final, but you can try the 'report a problem' link to contact iTunes Support and see if they will refund or credit you : http://reportaproblem.apple.com
If the 'report a problem' link doesn't work then you can try contacting iTunes Support via this page : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

DAC server start-up error and Can't authenticate user

HI,
we have installed DAC server in Linux machine and client on windows. By using DAC client we restored the backup of DAC repository, DAC client was working fine still restoration and after restoring it’s not logging in. It throws error like "Can't authenticate user"
while starting DAC services in Unix server it throws an error like
ANOMALY INFO An exception occurred. Shutting down server...
MESSAGE:::/u01/DAC/jdk/jre/lib/i386/xawt/libmawt.so: libXext.so.6: cannot open shared object file: No such file or directory
EXCEPTION CLASS::: java.lang.UnsatisfiedLinkError
Note: since DAC client is not separately available for windows we have installed dac server also and while installing and after installing we never configured to connect to the dac server which is in Linux, we have configured only DB.
we have successfully installed OBIEE, Informatica, and DAC version is 10.1.3.4.1.
How to start the DAC services?
How to configure dac client to connect to DAC server and how to solve this "Can't authenticate user" issue?
Pls help in this regard.
Thanks in advance.

EddyLau wrote:
Hi,
I encounter the "Can't authenticate user" error in DAC first setup after installation when it prompt up to ask for setting up administrator id and password.
here's my sql statement to create database schema for dac in oracle database.
grant dba, connect, resource, create view, create session to SSE_ROLE;
create user DEV_DAC identified by "password";
grant DEV_DAC to SSE_ROLE;
grant dba, connect, resource, create view, create session, grant any role to DEV_DAC;
I tried dropping the data schema and create it again but still fail to authenticate.
did I grant enough privileges to the database schema?
Please help.
Thanks,
EddyLogin to DEV_DAC using the credentials from SQL Developer or sql
Then do select * from W_ETL_USER -- here you will see 2 Administrator id's listed
now run the command Delete From W_ETL_USER
Now login to dac client with Administrator and pwd which you have set earlier.
Mark as helpful or correct if it helps
Thanks,
RM

Iphone4 would not restore Error -50. I have tried to restore and it restored it to the point that it created after 5.0 was installed. How can I get it an older restore point from my backups and restore it on another computer? The phone has been wiped out.

Iphone would not restore---- Error -50. I have tried to restore, and it restored it to the new point that it created after 5.0 was installed. How can I get it an older restore point from my backups and restore it on another computer? The phone has been wiped out. I can see earlier backups in my C:\Documents and Settings\user\Application Data\Apple Computer\MobileSync\Backup folder. There are four subfolders in this address. I need my contacts, photos, and messages back. I know this is a common error but I can not figure it out. I have ran the other troublshoot items in the error steps for 13 and 14 like apple says. Is there a way to call apple and get a step by step of how to restore from another restore point? Does anybody have a solution????

It tells you to go to Error 13 and 14 if you receive error (-50).
Here is what I have tried...
Error 13 and 14: These errors are typically resolved by performing one or more of the steps listed below:
Perform USB isolation troubleshooting, including trying a different USB port directly on the computer. See the advanced steps below for USB troubleshooting. I have moved it around to different ports.
Put a USB 2.0 hub between the device and the computer. Didn't change anything.
Try a different USB 30-pin dock-connector cable.
Eliminate third-party security software conflicts. Removed all virus protection and firewall.
There may be third-party software installed that modifies your default packet size in Windows by inserting one or more TcpWindowSize entries into your registry. Your default packet size being set incorrectly can cause this error. Contact the manufacturer of the software that installed the packet-size modification for assistance. Or, follow this article by Microsoft: How to reset Internet Protocol (TCP/IP) to reset the packet size back to the default for Windows.Used the Microsoft fix it.
Connect your computer directly to your Internet source, bypassing any routers, hubs, or switches. You may need to restart your computer and modem to get online. Doesn't matter.
Try to restore from another known-good computer and network. I do not know how to do this or how to find the correct/full/complete restore point. There should be more information for this.

How can I authenticate users against a WAS system from third-party app?

Similar Messages

Maybe you are looking for