Integrating 3rd party SSO with SAPGUI and distinguish between different SID

Hello,
we are trying to integrate a SSO application on Win XP with SAPGUI 6.20 (SAP 4.70).
The SSO app fills, in case of SAPGUI, the fields 'client', 'username', 'password' and 'language'.
Which credentials to choose is normaly based on information the SSO app gets out of the applications context it should log in to.
As an example with IE it's the window title and the URL.
But with the SAPGUI we only get "SAP" as an identifier, despite which SID/server(?) is selected. And therefore we are not able to fill in the corresponding credentials.
Where can the SID (and perhaps 'client') be retrieved by an external program when the logon screen is displayed by SAPGUI?
Please apologize if this is the wrong forum or I'm using wrong terms, but normaly I'm living outside the SAP world.
TIA!
Regards,
Frank

as an addendum to my post, I've seen that this can be done.
http://www.hardcopy.de/hardcopy/english/bsp_sap_neu_kz.php3

Similar Messages

Authentication on PocketPC through 3rd Party SSO client

Dear community,
I am currently investigating into the possibility of authenticating a user on a PocketPC device through a 3rd party SSO client.
Does anyone have any experience in this ? What is the configuration effort is and what product was used ?
Thank you very much, best regards
Jochen

as an addendum to my post, I've seen that this can be done.
http://www.hardcopy.de/hardcopy/english/bsp_sap_neu_kz.php3

BO XI 3.1 SP3 SSO with CMC and Webi Rich Client

Hello,
Is it possible in BO XI 3.1 SP3 to use SSO with CMC and Webi Rich Client ?
It works fine with InfoView, Designer and Desktop Intelligence.
Regards

Hi,
What kind of SSO authentication are you trying to set up? (AD, LDAP,...)
I think it's AD regarding your command line.
But be aware that in SSO, you don't need to configure the command line to run the client.
Have a look at the following guide.
[Configuring Manual Kerberos Authentication and-or SSO in Distributed Environments with XI 3.1 SP3.pdf|https://bosap-support.wdf.sap.corp/sap/support/sapnotes/public/services/attachment.htm?iv_key=002007204200000183782010&iv_version=0005&alt=2BCE4CB10DF674B172F4F3F7B32A284F49333135358877720E883731B332AF34CACD2AB52C0A2C8DCACA09084EF4CB494E4E0F2ECE8E2F89772908C9CE70CD2DF77675F7F2D1750C09514BCECFCFCE4C8DCF4BCC4DB5F575F4F4F3F57771F571F6F70B01B25D83D4120B0A722092A599504EB16D715E3E00&iv_guid=DF838310BFAAE8F1B486001A64C54696]
Regarding accessing CMC with SSO, it's not recomended at all as if you break this access, than you can't connect anymore to the CMC and modify settings.
Regards,
Philippe
Edited by: Philippe Tavares on Feb 15, 2011 4:11 PM

Can i use a 3rd party superdrive with my Macbook Air?

Hi,
As my title says, Can i use a 3rd party superdrive with my Macbook Air rather than the Apple drive?
Thanks.

Mark Thornton wrote:
Hi,
As my title says, Can i use a 3rd party superdrive with my Macbook Air rather than the Apple drive?
Thanks.
This one works just awesome:
http://www.newegg.com/Product/Product.aspx?Item=N82E16827136201&cmre=external_dvd_burner_usb-_-27-136-201--Product

I am attempting to update students' iPads using the Apple Configurator software. However, information for 3rd party apps, like Notability and Explain Everything, is being lost.

I am attempting to update students' iPads using the Apple Configurator software. However, information for 3rd party apps, like Notability and Explain Everything, is being lost.

Mike,
If by "still nothing" you mean they are not showing up in the AU manager after reinstalling them....
Im guessing the AU Cache itself is now corrupted so.....
Quit LPX
Open Finder
Press the option key and click "Go" in Finder's menu and select "Library". (This is the User Library and not the System Library and is normally hidden which is why you have to hold down the option key when clicking on Go.... to reveal it in the drop down menu that will appear)
Go to "Caches" dir and remove "AudioUnitCache" dir.
Now Restart your Mac.....
and then Launch LPX and let it rescan your plugins and see if that fixes things....
Fingers crossed...
Nigel

Problem with storing and retriving a different langauge font in mysql

hi,
i have problem with storing and retriving a different character set in
mysql database ( for example storing kannada font text in database)
it simply store what ever typed in JTextField in database in the
formate ??????????? and it showing ???????? .
please what can i do this problem.
thanks
daya

MySQL does not know about what type of Font you use or store. that is applicatioon specific. All it knows is the character set that you are storing and the data type and data. THere are something you should know when working with database and Java:
1. make sure you know what character set is used for the database table.
2. make sure you know what character set is used by Java (default to UTF-8 ..
sort off - there are few character that it cannot save). You can enforce the
character set being sent to the database by the String's getBytes(String charsetName) method.
3. make sure the application you use to view the table use the correct character set
if it use a different character set, then any character that it does not recogized
will be replaced with a quetion mark '?'....eventhough the data is correct.

[svn] 4793: Fix bug SDK-17734 Path with width and height set different than path data has incorrect bounds

Revision: 4793
Author: [email protected]
Date: 2009-02-02 11:20:06 -0800 (Mon, 02 Feb 2009)
Log Message:
Fix bug SDK-17734 Path with width and height set different than path data has incorrect bounds
Fix: When calculating the bounds position we should take into account the implicit scaling factor actualSize/naturalSize. Also did some refactoring, getting rid of the protected method calculateTopLeft.
QE Notes: None
Doc Notes: None
Bugs: SDK-17734
Reviewer: Ryan
tests: mustella gumbo/layout/GraphicElement
Ticket Links:
http://bugs.adobe.com/jira/browse/SDK-17734
http://bugs.adobe.com/jira/browse/SDK-17734
Modified Paths:
flex/sdk/trunk/frameworks/projects/flex4/src/mx/graphics/Ellipse.as
flex/sdk/trunk/frameworks/projects/flex4/src/mx/graphics/Path.as
flex/sdk/trunk/frameworks/projects/flex4/src/mx/graphics/graphicsClasses/GraphicElement.a s

Thank you so much for replying.
Yes I have removed and reinstalled WMP.
I had good results with the PD6 application installed on the default path onto the C: drive with the one exception that if the application was launched by accident and the user data path was not available, the PD6 application would blow away my custom user path registry settings. Now that I know what they are I have made a .reg file to repair my registry to my desired user data paths.
Installing the application on the removable drive appeared to help prevent me from launching the application by accident and overwriting my registry with default user paths.
So which is the less of the two evils?
If the application directory is not available, windows media player still tries to launch the .msi for installing PD6.
If I install the application to the C: drive but the user data to the removable drive, launching the PD6 application without the user data drive will still corrupt my registry settings for a user data path.
Both these issues seem like a logical (if not easy) fix that should be done in the PD6 application and installation package. I mean really, cannot anyone tell me why windows media player is checking the PD6 application directory? Why in PD4 did we have an option control for setting the user data path from the PD4 application? Why is this option not in the PD6 application, just the installer?
I am given a choice during installation to move the user data to another non default location. Why else would this be provided if not to accommodate my kind of request to store the user data into an alternate location other than “My Document”. Certainly Palm is not trying to force the users on how to protect and store their personal data?
Post relates to: Centro (Verizon)

How do I share photos and music between different user accounts on the same macbook

How do I share photos and music between different user accounts on the same Macbook? i.e. I want all to be able to access family photos when logged into their respective accounts. Same goes for the iTunes library. Hope this is possible...
Thanks!

To give other users read-only access to your iTunes library, use the Sharing features of iTunes. Sharing works over the local network as well as on the same computer. See the built-in help for details.
To give others selective access to your iPhoto library, you have the option of using iCloud Photo Sharing, if the privacy implications don't bother you. The images will be stored temporarily on Apple servers.
If you want to give full read/write access to more than one user, see the support articles linked below.
iTunes: How to share music between different accounts on a single computer
iPhoto: Sharing libraries among multiple users
There is a way to share the library without moving it to a secondary volume. If you really need to do that, ask for instructions.

Distinguishing between different calendars?

Is there a way to distinguish between different calendars from iCal on the Touch?

Nope.
Hopefully they will update that in the future. (www.apple.com/feedback)

Can I use a USB camera with the 3rd party USB camera software and share screens?

I want to do more than just use a USB camera w/iChat (or ichatusb). I also need to be able to initiate screen sharing between two computers. Specifically, I will use iChat with an insight built in camera on my end, and the other person will be using an iMac G5 PPC using a USB camera and the 3rd party USB software for USB ichat support.
My question then is am I able to request screen sharing (taking over their screen) from my ichat/fw combo to their ichatusb/usb combo?
thanks
dc

Hi,
The Cameras don't come into this at all. (But iChat and OS versions do)
Each end needs iChat 4 or higher.
Go to the Video menu and Enable Screen Sharing (Selecting toggles a tick On and Off (Tick Present is ON) )
Highlight Buddy in list and use the Screen Sharing icon at the bottom of the list (interlinked rectangles).
The G5 could be on Leopard (iChat 4) and be using a USB 1.1 camera that would need iUSBCam (formerly iChatUSBCam) as well as the Camera manufacturers Software.
iChat 3 (In Tiger OS 10.4.x) on the G5 with a USB 1.1 camera, Software and iUSBCam may well offer a Screen Sharing option (Or rather Desktop as Video Feed) in the iChat > Video Menu and that will not work
However if the G5 has USB 2.0 ports (not the Keyboard additional ports) then if it is up to OS 10.4.9 it can use a UVC Camera for Video Chats (UVC = USB Video Class No need for Additional Drivers) but Screen Sharing will still be an issue due to the iChat version.
IF the G5 is still on OS 10.4.x then you will have to use a third Party VNC app at both ends (And run a iChat Audio Chat along side)
9:33 PM Friday; September 2, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.8)
 Mac OS X (10.6.8),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Third party SSO with a custom login module

Hello everyone,
I've found a few posts on the forum with questions similar to mine, but none have been answered. I'm using a 3rd party authentication product along with a custom implementation of the AbstractLoginModule interface.
The setup is standard: A 3rd party agent is installed on a reverse proxy web server to SAP. The agent is configured to protect SAP resources, and it handles the login screens and authentication. Once the user has been authenticated, the AbstractLoginModule implementation kicks in, decrypts and validates an SSO token, retrieves the username from it and creates an SAP Principal.
The login ticket template is configured as follows:
1. EvaluateTicketLoginModule   SUFFICIENT
                    2. MyLoginModule                      REQUISITE
                    3. CreateTicketLoginModule       OPTIONAL
One of the integration's key requirements is that direct interaction with standard SAP authentication must be avoided. More specifically, the user should never need to enter an SAP password. I'm only seeing two problems, both of which violate this requirement.
The first is in cases where there is no existing SAP user that matches the authenticated user. In this case, the third party token and SAP Principal are created, the abort method is called, and the user is redirected to the SAP login page.   I need to either bring to user back to the third party login page or to a custom error page~.
The second problem occurs when an SAP password change is required. Again in this case, an SAP form is displayed after the module has created the Principal (although once the user changes the SAP password, all's well). If I were to disable mandatory password changes, would this apply to fat client access as well? If so, then it's not a viable option.
The general idea in both instances is that the SAP I'd appreciate any help or suggestions.
Thanks
~ Since the SSO token applies to applications outside of SAP, I may add a login module parameter to make this a configurable choice. (I.e. allow the administrator to decide whether to inform the user that SAP authentication failed while preserving the SSO token, or to destroy the token and force re-authentication). However, if there is a way to configure the "bad credentials" URL outside of the module's code/parameters, it may be better to place the choice there.

Hi Julius,
Thank you for the quick response - and on a Sunday, no less!
I have considered verifying that the user existed in SAP before creating the Principal. One might argue that that would be the common sense thing to do. The reason I've held off is that the error should be so rare that it may not justify the overhead. There's a requirement to have a one-to-one username mapping between SAP and the authentication application. It would be more efficient to assume that this requirement has been met and to handle the Exception when it hasn't been. Of course, that doesn't mean that it's the right way to go.
+_Julius Bussche wrote:_+
For the first concern, if they can access the logon page directly (anyway) you could disable it as you do not want any password based logons (right?) and redirect it to your external page or an error page.
Yes, this is what I'm hoping to do, but I'm not sure how to do it. Here are some comments and questions about this:
1. What's involved in disabling the login page? I would think you'd need to replace it with something else rather than just switch it off.   Could I limit this change to the login ticket template so that other templates (basic authentication, for example) are still available?
2. Keep in mind that users will never get past the "real" login page unless they have been authenticated. This complicates matters because we're dealing with a scenario in which the user has already been authenticated but doesn't exist in SAP. Therefore, it wouldn't make sense to go back to either login page.
3. What's involved in redirecting to an external page? Is this an explicit redirect in the module code, or can it be decoupled from the module? It's not a big deal, but it would be nice to avoid mandatory module parameters for relative paths to error pages.
I think the question I'm after is: "Can I simply change an SAP login URL parameter to point to a custom error page, and allow everything to work as it does now (where SAP handles the redirect)". If so, could I limit the scope of the change to the login ticket template? What would be even better is if I could configure SAP's response to this error. Somewhere, it's currently configured to display the login page. Ideally, I'd be able to configure it to display myErrorPage, and then set myErrorPage to the appropriate URL.
+_Julius Bussche wrote:_+
For the second concern, I assume that there are no valid passwords involved here which might have expired, so as long as the user does not have the option to activate a password again and anyway cannot logon via password as the option is not presented... then you should be fine here as well with a forward proxy. Not sure which Java APIs are offered here, but you could check this together with the existence check and react to both prior to accessing SAP "from the outside".
The problem here is that the SAP passwords are needed outside of the integration. It's true that whether an SAP password has expired is irrelevant to the integration. However, this is a Web-based integration; SAP passwords must still be available to users who have access to other clients. With this in mind, could I create a user password policy that disables password expiration and automatic password change, but only apply it to Web client access? If not, do you know how I might override SAPu2019s behavior?
Once again, thank you for taking your time to help me out. I am very grateful.
- John

Connecting directly from ECC 6.0 to a 3rd party system with out XI ?

Hi Guys,
we have developed soap-soap scenarios in XI and we are sending the data from ECC 6.0 -> XI ->3rd party webbased system.
Due to some security reasons we are looking for options of doing the same with out XI ie directly from ECC 6.0 to 3rd party system.
can somebody explain or provide the links for doing the direct connection and also suggest the advantages and disadvantages of eliminating XI completly from the design
any hep would be really appreciated
Thanks,
Srini

HI,
Yes, using standard Enterprise services from SAP you can communicate with 3rd party systems also,
Even you can configure the HTTPS communication with R/3 to 3rd Party system. For this you need to install the client Certificates and have to use valid User ID and Passwords.
http://help.sap.com/saphelp_nw04s/helpdata/en/3a/7cddde33ff05cae10000000a128c20/frameset.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/e8/1f1041a0f6f16fe10000000a1550b0/frameset.htm
Disadvantage of communication without XI
1. XI provides the re-usability concept. i.e. if you have just R/3 to 3rd party and tomorrow you may need to add another 3rd party or sap system to communicate, then you just re-use the existing scenario.
But in case of direct communication is leads to point-to-point connection.
2. R/3 can't directly support to the open Standards, either you have to use ABAP proxies or RFCs to convert it to XML format. But XI is an Centralized Integration Platform with Open Standard. In current world, Openness is important.
3. XI has the Ability to communicate with other messaging systems/products may be JMS or any other 3rd party systems also which has the limitations with direct communication
4. Complex processes for communication possible instead of only sending and receiving (business process management) (connect e.g. asynchronous and synchronous steps, define complex communication scenarios)
Mapping etc possible to accomplish in Java. Platform independent Java components.
5. XI has Java & .Net support. which is not possible with directly R/3
Thanks
Swarup

Integrating third party system with solution manger

Dear All,
How we can do integration between third patrty system and solution manager. As part of our implementation we have got some other application to be integrated with SAP . We have got ECC 6.0 and Solution manager.Can any one guide me how to do this,
Thanks
Hany

Hi Pankaj,
Yes this is possible.
Create an RFC using SM37 transaction.
Build the logic to retrieve the data.
The 3rd party system also should have the necessary logic to be triggered once there is a call from RFC & get the primary keys based on which it will retrieve data & pass it to SAP.
Best regards,
Prashant

Sales analysis w.r.t 3rd party processing with different vendors

Hi friends,
I am new to this group. My requirement is to find list of materials ordered by customer procured by different third party vendors.
e.g There is a sales order from a customer and I have items of which 2 are procured from a 3rd party Vendor and 1 item is produced.
Is there any transaction through which shows how much we procure and how much we procured from 3rd party vendor
Please help
Thank
Best Regards
Santosh

Hello,
no there's not a transaction showing the information you need. You can build a query or a report, according to the level of complexity, to get the information.
On top of that you should consider this:
if the materials procured externally have different codes than materials produced, with transaction ME2M you can get the list of Purchase Order items according to the material code;
if, as often it happens, in Sales Order, you have an item category dedicated to 3rd party items, you can extract from table VBAP the list of Sales Orders items with that item category, and get material codes and quantities of materials procured in that way;
Best regards,
Andrea

Backing up 3rd party apps with Time Machine

After what started out as a simple question...why won't my iChat stay connected now that i have installed OS Lion and spending over 2 hours with Apple Phone support and trying all the known trouble shoots, they told me the only thing I can now do is Back Up my MacBook Pro and do a HD erase and reinstall everything. So, this has me a little freaked out! I have never done this and am afraid of the results. In particular, my 3rd party applications such as all my Adobe Suite applications. I no longer have access to the initial start up and install Creative Suite CDs! At first apple support said Time Machine WOULD NOT back up 3rd party apps. Then I get an email and said they were mistaken and it WILL with a link to an article. Yet I see nothing about it with in the article I was sent. SO, has anyone successfully reinstalled their Mac from a Time Machine Backup along with any 3rd party apps?
What is also frustrating is that I asked if I could just go back to Snow Leopard since I had no issues with iChat using that OS. I was told I would have to do the same erasing of my HD either way to reinstall that OS. Ugh.
Thanks in advance!

Yes, as long as you let TM do a full disc backup (that is, you do not exclude anything in the TM backup settings) you will have a backup that allows a full system restore - puts everything back just as it was.
You can also clone your system using the shareware app SuperDuper or the donation-ware app CarbonCopyCloner
http://www.shirt-pocket.com/SuperDuper/SuperDuperDescription.html
http://www.bombich.com/
Both of these apps will make a true clone (literally, a bit-by-bit copy) of your hard drive onto an external drive. This clone will actually be bootable itself (you plug in the drive and hold the option key during startup then select the clone to boot from). You would boot from the clone, then reverse-clone it back onto your internal hard drive.
If you are really serious about being highly confident of not loosing files, you could use both - I keep a TM backup on one drive, and 2 clones on separate bus-powered hard drives.
P.S. even if you had not had any issues, you really, REALLY should be keeping regular, up to date backups anyway - things go flooey without warning sometimes and you risk loosing everything on your machine if you DON'T keep regular backup copies available.

Integrating 3rd party SSO with SAPGUI and distinguish between different SID

Similar Messages

Maybe you are looking for