BO Portal Integration for SSO

Hi
We are currently doing the BO Portal Integration
We are using BO 3.1 and Portal 7.01 and the Integration Kit is 3.1
We want to integrate Portal with BO
I am following the following link for integration
http://wiki.sdn.sap.com/wiki/display/BOBJ/CreateBOEXI3.1IntegrationKitiViewTemplateintoSAPEP+Portal
In that step 19 they have mentioned the details of Connector during System creation
We are not using SAP BI, the BO gets its data from rapidmart and BO users are created on Windows Active Directory.
So when the users are being created on windows AD how do we populate the values in the Connector of the System Creation
beacuase the step 19 says
From the Property Category list select Connector. Your selections determine the SAP ABAP system that will be validating the users. This is the system that you have defined previously as an entitlement system in CMC. Configure the values for Application Host, Gateway Host, Gateway Service, SAP client, SAP System ID (SID) and SAP System Number according to the SAP system.
Can someone please let me know regarding this and how we do the SSO between Portal and BO
As our user validation is not SAP ABAP system but Windows AD
Regards
Janak Mehta

Hello Johannes,
Could you please help to display BO reports in Portal.
please look into thread crated for the same.
Link: [/thread/1532284 [original link is broken];
Best Regards,
Pankaj Sharma

Similar Messages

R/3 Secure Store and Forward, while using SAP portal for SSO

Hello,
We are using SAP Portal UME for authentication, then SAP SSO tickets to log into the SAP R/3 system. Initially we decided that the end users would have a "disabled password" so that they must use the portal authentication mechanism to get into R/3 and therefore could not log in straight to R/3 system via SAP GUI.
All was working fine until during integration testing when someone tried to use the electronic signature function on a QM t-code (QA11) that prompted for an e-sig. Since local passwords have been disabled, the user could not execute the e-sig.
We do not want to activate local R/3 passwords for the users. Can anyone give some advice or a best practice regarding how to set up electronic sigs in R/3 while using an external authentication source? FYI, we are also trying to avoid using the LDAP connector from R/3 to our LDAP.
Please comment for any clarity needed or comments,
Thanks in advance,
Ryan

Good point - but I'm afraid of not knowning an instant answer.
Well, theoretically one could make use of the fact that an NWAS ABAP can act as http client (submitting http requests to the NWAS Java to validate logon data); but that's just a rough idea.
Regards, Wolfgang

Portal integration with Exchange SSO issue

Hello,
We are using NW04s EP 7.0 SP16 and Exchange server 2003. We are trying to perform OWA and Groupware integration. Both the servers are in the same domain. The latest Kerbmap filter is configured in the Exchange back end server. Everything works fine when we do User Mapping.
The SSO for Outlook Web Access works fine when pointed to the exchange back end server directly.
The SSO for groupware functionality such as appointments doesn't work. The error message is "No logon data found for system Exchange". The Exchange system is configured for SAPlogontickets and so i don't understand why its looking for user mapping.
Anyone faced a similar problem? does anyone made this to work using SSO?
Thanks,
~Yasin

hi Mannings,
there will be a new business package for SEM which will be relased and will be based on Web Dynpro. They will create views for integrating BPS, BSC etc for you by default and with the Portal Look and Feel too. But you might have to wait a while for that. AS for SSO - SSO tickets are absolutely supported and fine.
Currently you can use BSP iviews to integrate SEM BSP applications into the portal.
For Integrating BW in portal, the steps you have mentined are for information boradcasting from BW. A very simple way would be to create BW reports based iviews and just supply the query string for the bw report to be integrated. For transactions and other areas you can use the internal ITS provided with 640.

Xcelsius Portal Integration kit for Sharepoint not showing in the gallary

Hi Experts,
I am testing the Xcelsius in my organization. After creating a dashboard , I am trying to integrate it in my Sharepoint portal.
For that I installed SP webpart container in the server. During installation it was not showing any wizard to me for selecting the options. After installation , i am trying to configure it in the webpart galary but ! couln't find the Xcelsius Webpart container in that list.
What to do to show it ? Could anyone guide me ?
Regards,
Jyothi

i'm not sure how it works with Sharepoint... however, i can tell you how we use the portal integration kit within WebSphere Portal.
first, the PIK itself is only used for BO integration, not Xcelsius integration (unless you are doing SSO in which case the BO login module is required).
the Xcelsius integration comes from creating the web parts on the client. For example, for WebSphere there is a tool that is loaded onto the client machine called "XcelsiusPortletCreationUtility". the purpose of this utility is to take a swf file and wrap it in a war file that can be deployed to the portal. i would assume that Sharepoint works in a similar way with a client utility.
also, within the Xcelsius file you must create a portal data connection, even if it's not actually used.
please look through your Xcelsius documentation or try to find the specific document that explains Sharepoint integration.

Question of the day: Best Portal integration strategy for CRM 7.0?

I would appreciate it if anyone can give me their feedback with the knowledge and background with the Portaland CRM WebUI integration based on the following options:
These are the available options for portal integration:
Option A: Initial Login to CRM WebUI, launch other functionalities from WebUI
     All users login through SAP CRM WebUI. Based on user portal roles, available applications are presented using WebUI transaction launcher to open up as new browser windows or within the content area of CRM WebUI
Option B: Initial Login to Portal, CRM and other applications launched from Portal
     CRM WebUI is setup as a full screen BSP iView. All users login once through SAP NW Portal. Based on user portal roles, available applications are presented. CRM, BI BOBJ, KM are launched in a separate browser windows. For SAP applications, there is SSO available.
Option C: Initial Login to Portal, CRM and other applications integrated into Portal
     All users login once through SAP NW Portal. CRM WebUI is integrated into the Portal content area, and navigation between CRM screens are handled through Portal links.
Business considerations:
1. Single-Sign-On (SSO): The proposed solution should provide an integrated sign on page that allows access to other CRM applications without the user logging in again.
2. Frontend navigation: All CRM applications used by business should be accessible from a single location. This should cater for future applications as well eg: AFLS. Ideally there should be a minimum number of windows that a user has to juggle.
3. Contextual usability: The related applications should be linked to CRM and launched where it is used to support business operations. If possible, the applications should launch with the particular CRM transaction/record to minimize time required to locate relevant information eg: integrated reporting
4. Standardized look and feel: The portal should not change the functionalities of standard CRM and should integrate well in terms of the look and feel of the product and NOL branding
Based on the following business considerations, would Option B a better solution in terms of integration with other CRM applications, integration with other SAP applications (BOBJ, KM), flexibility in integrating with other options, SSO, maintainability and scalabilit.
Thanks a lot,
Cecilia
Edited by: John Burton on Jan 20, 2010 1:38 PM

We did option B at our client for CRM 2007. The authetication works perfectly between SAP NW Portal, and SAP CRM. It was one day work with single BSP iView (I beleive).

Wrong path for go.bat in portal integration

Hi Friends,
during the configuration of the portal integration in rspor_cust01 I get the message
'Windows can not find C:\usr.......\go.bat'.
Where can I change the path because it is in D:\usr\sap\......go.bat.
Thanks you for any help.
Rg Jimbob

Hi Subbu,
I used workshop page properties to associate the image to the page.
framework/skins/classic/images/home.gif
- Shankar
Subbu Allamaraju <[email protected]> wrote:
Shankar,
Did you use any tag to create the img tag? Do you have any sample
HTML/JSP snippet?
Subbu
Shankar Bala wrote:
I created a new desktop and have the following problem. The imagelinks to portal
pages in the horizontal nav bar in the top have wrong path.
Example.
In the original portal the home page link in the nav bar has a imageassociated
with it in workshop.
\framework\skin\classic\images\home.gif
The partial url generated for the image looks liek this:
\mywebapp\\framework\skin\classic\images\home.gif.
I created a new desktop everything works fine except for the images.The href's
are created for the links but the image path is wrong.
the url generated is : \mywebapp\appmanager\framework\skin\classic\images\home.gif
The "appmanager" in the path causes the problem.
Is this a bug?

Webdynpro for ABAP and Portal Integration

Hi Experts,
we created a WebDynpro for ABAP application for portal. The application will modify/update few fields in backend sap HR table PA0006 (infotype 6) . The end user (portal user) should be able to update his data in backend with the iview created on this application.
I have below two questions in my mind.
1. Do we need portal eventing for this? It's a single iview in portal which will fetch and update his data through this WebDynpro for ABAP application.
2. It is for 10 countries of almost 1000 users (with same userid in portal and backend). How can I make sure that the enduser updates and fetch his records only. The SSO is already set up between Portal and Sap ECC system. Do I need to again pass the enduser portal id to the sap in coding to fetch and update the data or sso will take care of itself.
Thanks
Ajay

1. Do we need portal eventing for this? It's a single iview in portal which will fetch and update his data through this WebDynpro for ABAP application.
Answer: If you use, for exemple ITS to access this Webdympro, you will not need any action on portal for sure. Actually you will just need actions on portal, if you want to make some customization on portal side. If you want just show the Webdympro how it is, your action are all on backend..
2. It is for 10 countries of almost 1000 users (with same userid in portal and backend). How can I make sure that the enduser updates and fetch his records only. The SSO is already set up between Portal and Sap ECC system. Do I need to again pass the enduser portal id to the sap in coding to fetch and update the data or sso will take care of itself.
If you access via ITS, te custome will acess the backend with the user you have set on the SSO or user-mapping. The portal there is nothing to do in this regards, you must just take care of this on backend.
Please evaluating the answer you are contributing for the SDN keep growing.
Edited by: Fabio Sarmento on Sep 19, 2011 2:41 PM

Portal integration of Webdynpro for ABAP application

Hi all,
Can anyone provide me with the steps for <b>integrating a Webdynpro for ABAP application with portal?</b>
Regards,
Bino

Hi Bino
Check out the following link
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/webas/webdynpro/portal integration of web dynpro applications.pdf
Regards
Rajeev.
Do award points for helpful answers in SDN.

Java Portal Integration Kits for CrystalReports 10

Hi,
I have to integrate Websphere Portal 6.1 with Crystal Reportss 10.
Is Java Portal Integration Kits avaible for Crystal Reports 10 ?
Andrzej Urbanowicz

Java Portal Integration Kits integrate Enterprise, not Crystal Reports.
And PIK issues should not be posted here, but in one of the "Business Objects" forums.
SIncerely,
Ted Ueda

Create URL to specific Business Object for a CRM using Portal integration

Hello CRM Community,
we're using the CRM Portal integration. To update our business users with tasks we use the standard functionality to send Alerts using the function module SALRT_CREATE_API. It allows to specify a URL that is added to the E-Mail created in the alert using the Table parameter IT_ACTIVITIES. This URL should be filled with a direct link to the business object that must be changed. For the stand-alone CRM there is the static Method CREATE_URL of the class CL_CRM_WEB_UTILITY to build such an URL. But I was not able to find a similar class/method/function module when the CRM is used integrated in the portal. Has anyone a simmilar requirement and was able to solve it?
Best regards
Gregor

Hell0
Gregor Wolf
Yes i have also same doubt regarding class this integration , Please share this stuff with me !! Nice Question !!
Thanks & regards
Asish

What is 'Supports Portal Integration' check box for?

Hi.
I just wondering what is 'Supports Portal Integration' check box use for..
what is difference when this check box is on or not?
thank you..

Hi,
It all has to do with session mngmnt. See also
http://help.sap.com/saphelp_nw2004s/helpdata/en/83/132197c3564643af326a5ebccb604f/frameset.htm
Eddy
PS.
Put yourself on the SDN world map (http://sdn.idizaai.be/sdn_world/sdn_world.html) and earn 25 points.
Spread the wor(l)d!

Has anybody integrated with CO-Sign for SSO / Authentication

Hi Folks,
Has anybody looked at Co-Sign for SSO in terms of forms / discoverer in the 11g release?
Gary

Marvin,
You make me feel better. I thought I might have been the only one who had ever done this. ;-) It's not too bad to clean up.
I am referencing old notes, and do not currently have access to an OID instance to verify, but try this:
In Entry Management, look under the default Oracle Context, under Services, and Ebusiness. You should see an entry for your EBS instance. (For example, the full DN might be: cn=VIS,cn=EBusiness,cn=Services,cn=OracleContext). Remove this record, and you should be set. You may need to remove other links to this record under your custom context. For example, there may also be a DN cn=VIS,cn=EBusiness,cn=Services,cn=OracleContext,dc=your_org,dc=com.
I was initially concerned that there might be a ton of junk to remove from OID related to the EBS instance registration, but I was not able to find any other likely entries, and was able to proceed with re-registration without issues after removing these two entries.
Hope this helps!
Regards,
John P.
http://only4left.jpiwowar.com

Application Integrator and SSO by SAPLOGONTICKET

After the docs (e.g. "How to Use the Application Integrator") and blobs mainly focus on user mapping, I wonder how to configure SAPLOGONTICKET in com.sap.portal.appintegrator.sap.Generic efficiently.
Does combining "URL template" and "URL template fraction for SSO" give a chance for sending a Login Ticket to another server (distinct domain)? Or is the "authentication" part in "URL template" useless for Login Tickets (as stated in <a href="https://www.sdn.sap.com/irj/sdn/thread?threadID=21141">Thread 21141</a>)?
Thanks
Gerhard

Hi Gerhard,
If your system is set to log on with SAP logon tickets for authentication, you can specify an authentication template in parameter SSO2Template, e.g. MYSAPSSO2=<Request.SSO2Ticket>. That's all it takes on portal side to configure the SAP Logon Ticket when using application integrator. .
If you want to use SAP Logon Ticket for multiple domains (portal server and backend server are in different domains) you have to take special care. Have a look into the <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm">SAP Library</a> to find out how to configure logon tickets for multiple domains.
Hope I could help!
Best regards,
Martin

Authentication issue with Xcelsius/Portal integration

I am facing an issue with the way we have integrated our Xcelsius dashboard with our corporate portal. I know this probably is more of a SDK question than Administration, but I figured I will ask it here anyway since Tim and some others are diverse enough in their knowledge base. This might be LONG post but please advise if anyone has any good pointers.
We have an Xcelsius dashboard that needs to be served up via our corporate intranet (based on MS Sharepoint 2007). Now we are NOT using the MS Sharepoint Portal Integration Kit, but just doing a basic integration of the SWF call within a web part on Sharepoint. All this means is that within a portlet (web-part) on Sharepoint, I am making a HTTP call to the openDocument URL to invoke the SWF file. So the SWF is actually served up from our Tomcat App Server, and displayed onto this frame within the portal. That is the basic idea.
To achieve this, what I did was write some custom code using the Java SDK to modify the openDocument a little bit. By doing so, I was able to insert some behind-the-scenes-login code wherein no matter who the portal user (Win AD-based) is, he is logged in to BOE as a generic "dashboard-user" and the dashboard is served up. This worked fine for the first dashboard where all we had was SWF and some WebI linking using openDocument (no full-InfoView access).
But in this second dashboard now, what we also have is a hyperlink for users to get to InfoView to do Ad-hoc reporting. What this does is open a child browser window from within the portal (dashboard) --- and it remembers the BOE session for the generic user id "dashboard-user" and logs the end-user in to InfoView using that. But what I actually want is that the end-users, on this new window, should only be prompted at the traditional InfoView logon screen where they can manually enter their Windows AD password and get in. Thus, I would like to keep the dashboard SWF page session separate from the InfoView ad-hoc session, which I cannot seem to do because of the browser relationship and session maintenance.
I am trying to find a way where I can simulate a single sign-on for dashboard viewers on the portal, but at the same time let them jump off to InfoView as themselves.
Any thoughts on how I can do this?
Notes:
We DO NOT have Single Sign-On enabled for InfoView
We are using Windows AD authentication (manual, no SSO)
We are on Tomcat

Sarang Deshpande wrote:
1) If the InfoView app on Tomcat (desktoplaunch) is configured with Vintela, openDocument calls from the portal with automatically work using behind the scenes SSO, correct?
in XIR2 everything that falls under infoview should SSO when infoview is setup for SSO (not the case in XI 3.x)
Sarang Deshpande wrote:
2) What is the best practice when it comes to the service accounts needed? I have implemented Windows AD manual auth already so I have a service account that use for that. Should I be using the same on and making vintela/SSO-specific changes to it...or should I have a separate vintela service account and deal with two different ones..each for a diff purpose?
There is no best practice per se but the less service account the lower your chances to duplicate an SPN, functionally everything seems to work just as well with multiple as it does with 1 (of course with 1 there is less management work) If you click the SSO link in my forum sticky post I have a section explaining this with some suggested methods of deploying a service account(s)
Sarang Deshpande wrote:
3) Other than some minor browser configurations that might be required, is there anything else that I should communicate to the team about what might be required to be "pushed" to users' PCs?
Using the default config nothing should be required on the client machine (unless SSO has been disabled in the browser or you intend to use a url that contains a period ..... (i.e. FQDN or IP) with hostname URL (the default) it should just work.
To note if you have XP SP2 or older there is a microsoft spnego bug you may need to apply a fix if you aren't patched to SP3 (about 5% of our customers run into this).
Regards,
Tim

BusinessObjects Portal Integration - iView Template Missing

Hello
I have installed my BusinessObjects for Portal as follows:
1. We already have BI 7.0 on SQL 2005 on BIDEMOSER SERVER.
2. Installed BusinessObjects Enterprise 3.1 , Crystal Reports 2008, SAP GUI 7.1 and SAP Integration Kit on this new server name : BODEMOSER.
3. We already have EP 7.0 on Oracle 10.2 on EPDEMOSER SERVER.
I have installed the BOE 3.1 and Integrated with the BI Server and imported the roles and all the functions are working fine between BO and BI.For Portal Integration i have transferred the masterview file from BODEMO SERVER com.businessobjects.pct.masteriview.par to the EPDEMOSER SERVER.
And it was uploaded in the EPDEMOSER SERVER System Administration--> Support --> uploaded successfully.And I have followed the SSO configuration as per te guide. And values in the Web.xml files are properly as per the guide.
After the uploading the masterview par file i could not able to view the iView template in the System.I have cleaned the cookes and all temp files.
As per the guide I have created an folde name BI_BO and SYstem name as BI_BO_DEMO.Now when I started creating a iView Template by right clicking the System name BI_BO_DEMO and provided the following parameters for each Property Category.
CRYSTAL Enterprise server:
Host Name of Crystal Enterprise Server      :     BODEMOSER.srv.com:8080
Path of Crystal Enterprise Server      :     /SAP
Protocol of Crystal Enterprise Server      :     http
User Management
Authentication Ticket Type     :     SAP Logon Ticket
Logon Method                :     SAPLOGON TICKET
User Mapping Fields
User Mapping Type
Connector
Application Host      :     BIDEMODER.srv.com
Gateway Host      :     BIDEMODER.srv.com
Gateway Service      :     sapgw00
Logical System Name      :     BIDCLNT001
Remote Host Type      :     3
SAP Client           :     001
SAP System ID      :     BID
SAP System Number      :     00
Server Port
SNC Library Path
SNC Mode - Select -01
SNC Name
SNC Partner Name
SNC QOP (Security Level) :     0
System Type      :     SAP_BW
Trace Mode           :     0
System Alias
Created a System Alias as : SAP_BW
And tested the connection where it gives as
Test Connection with Connector
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
Results
Retrieval of default alias successful
Connection failed. Make sure that Single Sign-On is configured correctly
Whether i should install the BO Integration kit in EP portal also or any Portal Inetgration kit is available.
Regards
Bala

Hi,
1. Whether Integration kit for SAP should be installed in EP Server also ( which has been installed in BO server for BI and the SSO for BI and EP STRUSTSSO2 also works fine.
- the portal is acting as the frontend for viewing content and yes there needs to be trust between your portal and your BW system
2. the connector parameter and the iview template object parameter as correct as per the distributed enviorment.
When i checked with portal; admin they asked doubt what should be crystal enterprise server ( BO) and the what is the server should connector parameter should have.
- the Crystal Enterprise parameter do not influence the connector properties and do not lead to the point that the connector settings fail. the Crystal Enterprise parameters are only relevant when viewing SAP BusinessObjects related content.
Make sure you connector settings work even without the Crystal Enterprise parameters first.
ingo

BO Portal Integration for SSO

Similar Messages

Maybe you are looking for