Agent Enterprise Single Sign On 11

Good day everyone,
I have a problem with the Logon Manager component (agent) suite of Enterprise Single Sign On 11, when I install the agent on the client pc console generated in the Logon Manager administration does not recognize me configure applications on the console to automatic access.
I use as a repository database Oracle 10g,
Thanks

Hi,
I think it is possible. I came across below link:
[This FAQ was deleted: visit SAP Single Sign-On for help]
As per this link, it says:
The following SAP systems can issues SAP Logon Tickets: systems as of SAP Basis 4.6C (see SAP Note 358469), SAP Web Application Server 6.10 and above, SAP Enterprise Portal 5.0 and above. SAP systems as of SAP Basis 4.0 can accept SAP Logon Tickets (see SAP Note 177895).
Also, check below link:
http://help.sap.com/saphelp_nwmobile71/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm
Thanks
Sunny

Similar Messages

What is the latest version of Identity Manager, Enterprise Single Sign On

Good day,
where can I download the latest version of Identity Manager, Enterprise Single Sign On, also know if there are any patch for the latest version,
Very grateful

Oracle Identity Manager (9.1.0.1) Download:
http://www.oracle.com/technology/software/products/ias/htdocs/101401.html
Connectors:
http://www.oracle.com/technology/software/products/ias/htdocs/connectors.html
Oracle Enterprise Single Sign-on Suite Plus (10.1.4.1.0)
http://www.oracle.com/technology/software/products/ias/htdocs/101401.html
All Patches For All Oracle Products - Refer to My Oracle Support

Where to download the latest eSSO (Enterprise Single Sign-on Suite)

Hello all,
Can someone please point me in the right direction in order to download the installer for the eSSO Suite software. I've been on the following pages and downloaded most of whats available there but can't seem to find the eSSO only the Open SSO.
http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
http://www.oracle.com/technetwork/middleware/ias/downloads/101401-099957.html
http://edelivery.oracle.com/EPD/Download/get_form?egroup_aru_number=11493752
Thanks for your time!
Luis M.

Found it with help from someone from Oracle:
1. edelivery.oracle.com
2. Select: Fussion Middleware / Microsoft Windows 32 bit
3. Bottom of page, click continue
4. Search for Enterprise Single Sign-On Suite Plus
Regards!

Oracle Enterprise Single Sign On, multiple instances

Hi,
I am implementing Oracle eSSO 11g with AD in an org.
In the same org there is Oracle eSSO 10.1.+ version running on the same AD for a seperate set of groups.
- How should I go about with the installation can both versions of eSSO work with same AD ??
- Should the older version be removed and 11g installed ??
- Is there any migration document for this kind of change ??
Any help/ suggestions will be greatful... Thanks in advance.. :)

SSPR doesn't do that. You need OIM or some other product.

SSO (single sign on) on NetWeaver 7.0 Enterprise Portal based on spnego with Microsoft Active Directory

Hi,
we are using SAP Netweaver Enterprise Portal 7.0 (SP25) based on Windows 2008 R2/Oracle 11g.
When we setup the Portal, we used the UME of the ECC - ABAP.
The portal is used internally only.
Now we want to provide SSO.
User authenticate against Windows Active Directory (Windows 2003).
We thought SSO via spnego would be the best solution.
Any better alternates, we should use?
We are following the SAP documentation:
SAP-Bibliothek - Benutzerauthentifizierung und Single Sign-On
We still want to create users in ABAP and assign them the portal roles. LDAP access should only have read access, to verify the security token from Active Directory.
When we setup the portal from scratch using ABAP as its UME, in the system configuration, LDAP can't be selected/add as data source.
In case we understand the documentation correctly, we would now need to add LDAP via the configtool for read access.
What is not clear to us, when we active now LDAP via config tool, if we would now lose the ABAP connection.
Is there a tutorial for SSO Netweaver 7.0 EP, like for EP 7.3, available?
In 7.3 SSO is pretty simple to get it running, thanks to the many tutorials here and on the internet.
Thanks for your help.
Best regards
Carlos Behlau

Hi,
I was able to generate the key via ktab program.
But when I am enable SSO, nothing is happening when I try to log-on via SSO to the portal.
I installed WebDiag tool on the portal server and ran trace.
The users are located in domain: company.com of activate directory.
The Java AS are located in domain: sap.company.com of activate directory.
The sap.company.com domain acts as child of company.com.
When I check the WebDiag trace, I see for the SPNegoLoginModule - the entry "... no key (etype: 23) for realm sap.company.com available ..."
I would except company.com as realm key, as the keytabs have been generated on the domain controller of company.com.
Is it possible to get SSO with child domain running?
Based on the statement of the network folks, child and father domain having a trust.
Thanks for your help.
Best regards
Carlos

Ask the Experts: Single Sign-On with Cisco WebEx Meetings Server, Internet Reverse Proxy, and Enterprise License Manager Solutions

With Arun Kumar
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Single Sign-On (SSO) with Cisco WebEx Meetings Server (Cisco WMS), Internet Reverse Proxy (IRP), and Enterprise License Manager (ELM) solutions.
SSO standards such as Security Assertion Markup Language (SAML) 2.0 provide secure mechanisms for passing credentials and related information between different websites that have their own authorization and authentication systems. SSO enables simplified user authentication and management.
IRP provides public access, enabling users to host or attend meetings from the Internet and mobile devices. Although IRP is optional, Cisco encourages its use because it provides a better user experience for your mobile workforce.
Example question topics include:
SSO profiles and SAML 2.0 Identity providers (IdPs) supported in Cisco WMS
Basic configuration of IdPs
Interaction between IdPs and Cisco WMS
Difference between the cloud client implementation and Cisco WMS
Meeting access behavior in a split-horizon network topology with SSO
How to enable public access to Cisco WMS
Cisco WMS ELM operations
Cisco WMS ELM compared to other unified communications ELM or standalone ELM and compatibility/inoperability between them
Arun Kumar is a team lead in the San Jose Conferencing Technical Assistance Center. He has over eight years of experience in conferencing technology and specializes in Cisco Unified Meeting Place Express and Cisco WebEx Meeting Server. He joined Cisco in 2010 as an escalation engineer for the Cisco Telepresence group. Before joining Cisco he worked for the UK's third-largest internet service provider Supanet on VoIP technology and the *Nix domain. Kumar holds a master of science degree in computer science from Sikkim Manipal University in India, and he holds CCIE (Voice) and VMware Certified Professional certifications.
Remember to use the rating system to let Arun know if you have received an adequate response.
Arun might not be able to answer each question because of the volume expected during this event. Remember that you can continue the conversation on the Collaboration, Voice, and Video community Other Subjects subcommunity shortly after the event. This event lasts through Monday May 17, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hello Mobile Service,
CWMS and Jabber integrations:
http://www.cisco.com/en/US/docs/voice_ip_comm/jabber/Windows/9_1/JABW_BK_E4CC9599_00_environment-configuration-guide_chapter_01.html#JABW_TK_SF2ED5E1_00
In above link start from section: Set Up Cisco WebEx Meetings Server on Cisco Unified Presence
then move to section: Add Cisco WebEx Meetings Server to a Profile
Once done, move to section: Specify Conferencing Credentials in the Client side. You will see above server already listed there, just go ahead and enter your username and password (pleae make sure this user already exists on your CWMS) and accept any certificate/s if presented. Jabber Integration is done and you can start testing the same.
Attached CWMS - AFDS integration doc.
Please let me know if any furhter question.
Thanks, Arun

Setting up BusinessObjects Enterprise 3.1 for Single Sign On with Xcelsius

Hi all
Does anyone have any documentation and/or whitepapers that documents the setting up BusinessObjects Enterprise 3.1 for Single Sign On with Xcelsius Dashboards (xcelsius accessing BusinessObjects universe data through QAAWS and Live Office..
Thank you for your help.
Kind regards,
Dean

Based on the replies in this thread I'm guessing that there is someone out there that has gotten SSO to work with Xcelsius? If so could you please post the details of how that was achieved?
When we purchased Xcelsius we were under the impression that it supported SSO but have never been able to get it to work and finally had SAP tell us that Xcelsius did not support SSO.
Our understanding is that in order to bypass a login for Xcelsius you have to use QaaWS as the datasource and hardcode an enterprise id and password.
LiveOffice supports SSO but not when it's used as a datasource within Xcelsius.

11.1.0.1.0 Enterprise Manager Grid Control - Single Sign-on certification

Greetings all,
What are the single sign-on solutions that work with 11.1.0.1.0 enterprise manager grid control?
thanks
Seetharaman

That shouldn't happen normally. Check again the installation guide that you meet all requirements for the repository database. Make sure there's no 'old' SYSMAN user (from standalone database control etc.).
Werner

Single Sign On -- Enterprise portal and BI JAVA

Hi,
I need to watch reports BI J2ee from an EP 7.00. I have configured the single sign On but it works just for ABAP BI Stack.
This is what I have done for SSO JAVA:
Importing the BI JAVA Certificate to the SAP NetWeaver 2004s Portal (SAP EP 7.0)
 1. Start the SAP J2EE Engine Administrator with %INSTALLATION_ROOT%admingo.bat.
 2. Connect to the portal server.
 3. Choose are the values of and of certificate SAPLogonTicketKeypair-cert (see above).
You also have to add these values under evaluate_assertion_ticket:
 13. Start the SAP J2EE Engine Administrator with %INSTALLATION_ROOT%admingo.
 14. Connect to the portal server.
 15. Choose (for example, CN=J2E)
Any clue?
Regards

Hi Jorge,
if the UME is used with an ABAP based system as the back-end user storage, do the following:
Generate and export the Portal Certificate:
Go to Visual Administrator
Choose <SID> - Server - Services - Key Storage - from the tree Select the view TicketKeystore under Views
If the SAPLogonTicketKeypair exist, delete it.
If the SAPLogonTicketKeypair-cert exist, delete it.
Generate a portal certificate using the following steps:
Under Entry choose Create.
Enter the folowing values in u201CKey and Certificate Generationu201D
Organization Unit Name (OU) = J2EE
Common Name (CN) = <SID>
Entry Name = SAPLogonTicketKeypair
Store Certificate: X
Algorithm: DSA
Click u201CGenerateu201D
Import the Portal Java Certificate into ABAP
STRUSTSSO2
System PSE:
u201CImport Certificateu201D - Choose your exported .crt file - File format = Binary
Click u201CAdd to Certificate Listu201D
Click u201CAdd to ACLu201D - System ID = <SID>, Client = 000
save it.
Export PSE ABAP Certificate and import into J2EE Portal:
STRUST
Choose PSE, export it and save as <SID>.pse
sapgenpse export_p12 -p <SID>.pse <SID>.p12
copy the generated p12 file <SID>.p12 to J2EE Portal
Go to Visual Administrator
Choose <SID> - Server - Services - Key Storage - from the tree Select the view TicketKeystore under Views
export the .p12 ABAP certificate with "Load"
adjust com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule:
Choose <SID> - Server - Services - Security Provider - from the components tree select evaluate_assertion_ticket
ensure that trustediss<n>, trusteddn<n>, trustedsys<n> are correct set.
ume.configuration.active = true.
restart the ICM in SMICM
If you also want to use SSL, there are some further steps to be done.
Regards,
Gerd

Single Sign-on and HTTP Server not started

I have installed oracle9iAS on SuSE Linux Enterprise Server 8 (SLES 8) which is certified by Oracle to run oracle9iAS. Everything was working propely after installation but when I restarted the server, the listener, the iasdb instance, and the EM started properly but when I went to http://servername:1810 and clicked on start all i got them all started but the HTTP Server and the Single Sign-on. When I tried to start the HTTP Server individually i got the following error:
oracle.sysman.emSDK.util.jdk.EMException: The opmn request has failed. From opmn: HTTP/1.1 204 No Content Content-Length: 0 Content-Type: text/html Response: 0 of 1 processes started. Check opmn log files such as ipm.log and ons.log for detailed.
I checked the log and its showing the following:
03/10/25 16:44:23 Connection 0,192.168.10.11,6200 message missing 'Content-Lengt
h'
GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&descri
ption=true&name=%2F HTTP/1.1
Host: linux2.future:6200
Connection: Keep-Alive, TE
TE: trailers, deflate, gzip, compress
User-Agent: RPT-HTTPClient/0.3-3
Cache-Control: no-cache
Pragma: no-cache
Accept-Encoding: deflate, gzip, x-gzip, compress, x-compress
I tried to start it from command line with the command
$dcmctl start -ct ohs
and it returned ADMN-906025
Anyone can help me solving this problem??

This error Can be caused by a syntax error in your httpd.conf file, check it / correct it try reloading OHS.
Ensure that emctl is not running when you run any dcmctl commands! If you have already run any dcmctl commands with emctl running that can cause your problem - if so to fix it solution is really to re-install.

Single Sign On For CRM IC?

I'm working on a project to implement Single Sign On for our company. I currently have it working for all of our SAPGUI users via SNC (LDAP auth) and also our portal users (also via LDAP auth), and want to use it also for the CRM Interaction Center (Web client).
Has anyone successfully implemented a single sign on solution for the IC? If so, reward points are waiting for someone who can guide me to documentation on how to set it up/configure.
Thanks in advance for any help the forum can provide.

Hi Wayne, a very good question based on the docs. <a href="http://help.sap.com/saphelp_crm40sr1/helpdata/en/99/39926a159f4a75bd7abeec9b49a040/frameset.htm">In the docs</a> it is stated that:
Integration Into Single Sign-On Environments
 The application does not accept SAP logon tickets.
 The application does not accept X.509 digital certificates.
 When the IC agent user is integrated into the SAP Enterprise Portal, it is SSO enabled.
I would guess, this means, there is an iview or something like this in the portal to start the WebClient wihtout requiering the user to authenticate again.
regards,
Patrick

Sample Application - Single Sign On from PeopleSoft to Infoview

This zip file contains the code which provides the capability of Single Sign On (SSO) from the PeopleSoft portal to the BusinessObjects Enterprise Infoview portal even to the report level. See the documentation in the docs folder for information on what this code does and how to install it within your environment. *********************Update: Please be sure to download this <a href="http://ftp1.businessobjects.com/outgoing/CHF/boXIr2psoftwin_chf.zip">patch</a> (KBase<a href="http://technicalsupport.businessobjects.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=1544953&sliceId=&dialogID=14530755&stateId=1 0 14532113">1544953</a>) for the Integration Kit for PeopleSoft software as well. It resolves a security issue with how the PeopleSoft logon token is handled by BusinessObjects Enterprise.

Hello Boris,
The error happens seemingly at the very end of the SSO login. The Infoview screen is created, and after it is all built out the error appears. The error appears before any user interaction and before a report can be run. Clicking OK makes the error go away, but InfoView is not fully functional (folder hierarchy doesn't expand, etc etc).
WAS log file excerpt at time of error:
[5/7/07 15:31:58:926 CDT] 6ace6575 SystemOut O 15811343 [Servlet.Engine.Transports : 15] ERROR com.businessobjects.encyclopedia.uitoolkit.web.ToolkitServlet - Request = /businessobjects/enterprise115/desktoplaunch/applications/init.bouitoolkit
[5/7/07 15:31:58:941 CDT] 6ace6575 SystemOut O 15811358 [Servlet.Engine.Transports : 15] ERROR com.businessobjects.encyclopedia.uitoolkit.web.ToolkitServlet - From = wxpch1-bfqb.cna.com
[5/7/07 15:31:58:941 CDT] 6ace6575 SystemOut O 15811358 [Servlet.Engine.Transports : 15] ERROR com.businessobjects.encyclopedia.uitoolkit.web.ToolkitServlet - java.lang.NullPointerException
[5/7/07 15:31:58:941 CDT] 6ace6575 WebGroup I SRVE0181I: [Desktop Web Examples] [/businessobjects/enterprise115/desktoplaunch] [Servlet.LOG]: java.lang.NullPointerException: java.lang.NullPointerException
 at com.businessobjects.encyclopedia.reportviewer.encyclopedia.EncyclopediaApplication.init(EncyclopediaApplication.java:167)
 at com.businessobjects.encyclopedia.uitoolkit.web.HtmlApplicationFactory.createApplication(HtmlApplicationFactory.java:103)
 at com.businessobjects.encyclopedia.reportviewer.wrapper.InfoViewPanel.init(InfoViewPanel.java:106)
 at com.businessobjects.encyclopedia.uitoolkit.web.HtmlApplicationFactory.createApplication(HtmlApplicationFactory.java:103)
 at com.businessobjects.encyclopedia.uitoolkit.web.ToolkitServlet.doPost(ToolkitServlet.java:265)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doService(StrictServletInstance.java:110)
 at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._service(StrictLifecycleServlet.java:174)
 at com.ibm.ws.webcontainer.servlet.IdleServletState.service(StrictLifecycleServlet.java:313)
 at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.service(StrictLifecycleServlet.java:116)
 at com.ibm.ws.webcontainer.servlet.ServletInstance.service(ServletInstance.java:283)
 at com.ibm.ws.webcontainer.servlet.ValidServletReferenceState.dispatch(ValidServletReferenceState.java:42)
 at com.ibm.ws.webcontainer.servlet.ServletInstanceReference.dispatch(ServletInstanceReference.java:40)
 at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:1171)
 at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java:676)
 at com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:203)
 at com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:125)
 at com.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java(Compiled Code))
 at com.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:71)
 at com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:246)
 at com.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service(OSEListener.java:334)
 at com.ibm.ws.webcontainer.http.HttpConnection.handleRequest(HttpConnection.java:56)
 at com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java(Compiled Code))
 at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:458)
This and the other information you've requested can be found in case #302807226.
Thank you for your help,
Brian

Single sign on and TimeMachine?

I finally sorted out a typo with my AFP server that was interferring with single sign on for clients, only to find that it appears TimeMachine still requires a username and password to do network backups. Is this true, or am I missing something? I was hoping single sign on would solve my user password issues around expiry time, but now I'm starting to fear that's not the case.
May have to look for an easier to manage agent based solution of some sort. Any suggestions (that aren't Retrospect)?

bump?

Single Sign-On and Data Visibility Rights

Hello,
I was wondering whether anyone has any best practices for implementing single sign on and user identification with Excelsius.
More specifically, I need to interrogate user role, and limit certain data visibility based on that role.
For example, a sales rep may only see certain data for their own territories, but the regional and national managers can see more.
With the emphasis in improving enterprise integration with the new version coming up, I'm also wondering if there are any improvements included for this aspect.
Thanks in advance.
Derick

Hi Derick,
I want to make our discussion into 2 parts
1) Sign on
2) Viewing data based on the Heirarchy
1)Before discussing about the Sign on i want to know which connectivity you are using ? Live offcie or QaaWS.
2) We can make the second point possible in two ways One is with providing restriction at universe level
and the other one is through the use of flash variables.
Using flash variables:
The main idea of using flash variables is reading the User ID from BO authentication and based on that we fetch the Heirarchy level of that user. Then we use some excel logic to hide the data from Low level heirarchy(Here we use Dynamic Visibility for components).
I hope this is what you ar looking for....
If so i have more points to acheive such scenario.
Please provide the your BO environment details, such that it will be easy to identify the better best wat to acheve it.
Regards,
AnjaniKumar C.A.

Cannot get end-to-end single sign-on to work in CR XI

Post Author: yarg
CA Forum: Authentication
Hello,
I'm looking for some help please. I have used Crystal Reports XI fairly extensively over the past year (designing reports mainly), and have now been tasked with getting CR Server XI up and running so that team members can view reports pertaining to them via a web browser. I have installed CR Server XI on a Windows Server 2003 VM and have followed every single step in the admin guide on pg285 about how to implement end-to-end single sign-on using Kerberos.
However, every time I try to access InfoView I get prompted for AD credentials. Single sign-on just is not working and there are no visible error messages to indicate why. Could anyone please offer suggestions? Even telling me whether there is any sort of log file which I can check to see what's happening behind the scenes would be very helpful.
Many thanks in advance,
Graeme

Post Author: colin mackenzie
CA Forum: Authentication
Hello Graeme.
Have you tested it with using the user settings under the Enterprise Authentication?
Does your reports and objects work for the user when connected with the "Enterprise Authentication Type?

Agent Enterprise Single Sign On 11

Similar Messages

Maybe you are looking for