SAP EP calling ASP screen - asking multiple logon prompt from internet

Hi,
We have EP page which calls multiple ASP page from the IIS server. When the users are in internet the system prompt for multiple prompt from the IIS server.
1. May i know to make it as a single logon
2. is it possible to do SSO between IIS and EP 7.3
Thanks

Hi,
you can use the SSO22KerbMap ISAPI Filter to accomplish you requirement. Please refer to
Using SAP Logon Tickets for Single Sign on to Microsoft based web applications
and
Single Sign-On of Windows-based Web Service Clients using SAP Logon Tickets
for more details.
Alterantively you can try with SAML (see Single Sign-On with SAML 2.0 - Security and Identity Management - SCN Wiki for more details), but then you should implement SAML Service provider on the IIS/ASP side, since unless I'm mistaken the IIS not provide it by default. Maby this link can be helpful for your: An Open Source ASP.NET SAML2 Service Provider | Passion for Coding
Best regards,
Artem

Similar Messages

  • Remote Desktop Gateway and WebAccess Deployment - Multiple Logon Prompts

    I'm having a few issues with some multiple logon prompts using "Connect to a remote PC" via RD Web Access.
    I am able to log onto the RDWeb without a problem.
    Essentially once I make a connection to my end-device I first receive a logon prompt, I'm authenticated, then I'm asked again for another logon prompt. Any ideas how to resolve this?
    My layout is simple:
    1 VM in the DMZ that has the Remote Desktop Gateway and Remote Desktop Web Access roles installed. No connection broker, or session host.
    With my deployment I have a wildcard certificate bound to the Remote Desktop Gateway and it is bound properly in IIS. Remote Desktop functionality through the RDGateway works just fine. However, the only nuisance is that I get prompted multiple times for
    credentials when accessing the end-device regardless if my connection is from a domain-joined machine or a non-domain joined machine.
    I've tried using Web Single Sign On via http://anandthearchitect.com/2014/01/20/rds-2012-r2single-sign-on-using-windows-authentication-for-rdweb-page/ and it still does not work.
    Any ideas?
    Thanks,
    Dan

    Hi Dan,
    How many prompts are you seeing?  Expected behavior for Connect to a remote PC would be this:
    1. Log on to RDWeb
    2. Select Connect to a remote PC tab
    3. Enter server name in Connect to box, click Connect
    4. Unknown publisher warning, click Connect
    5. Credentials prompt, it should say These credentials will be used to connect to the following computers: 1. rdgw.domain.com (RD Gateway server) 2. remote.domain.com (remote computer)
    6. After entering credentials and clicking OK it should log you in to the remote computer.  This assumes that the destination is authenticated properly (usually via certificate) and the credentials are valid for both the RDG and the remote
    computer.  Normally in a domain environment the same credentials (domain\username) would be valid for the RDG and the remote server.
    -TP

  • Multiple logon prompts when connecting to either server console session or RDS farm

    All,
    Since last Sunday when installing updates users are being asked to login multiple times.
    This affects both admins connecting to the console session of members servers and users connecting to RDSH boxes
    If i run 'mstsc /v:servername /admin' i'm prompted to enter my credentials.  Normally this will log me right in and i'll land on the desktop.  Now, i'm getting the main login screen on the server and having to enter credentials again.
    All servers are 2008 R2 SP1.
    Clients are a mixture of XP SP3 and Win7 SP1.
    All servers are in the same member server OU and recieve the same GPO.
    The problem only affects approx 50% of servers despite all boxes recieving the same policies and having the same updates installed.
    Like i said, this started to occur after we installed updates on all boxes last Sunday. The updates installed were KB2533552 & KB2534366. I've uninstalled KB2534366 but KB2533552 doesnt support removal.
    There are no errors in any event logs on any machines.
    Is anybody else having issues with recent updates or ideas how to fix as i'm really at a loss now.

    Hi,
    Did you enable “Always prompt for password ” in the RD session host or GPO?
    If you do, please uncheck this option by the following steps:
    1.      
    Start>programs>Administrative Tools>Terminal Services> Terminal services Configuration) >right click on the RDP-TCP go to Properties>Log
    on settings tab> Uncheck always prompt for password.
    2.      
    Computer/Administrator Templates/Windows Components/Remote Desktop services/Remotedesktop session Host/security/allways prompt for password upon
    connection
    Thanks

  • Automatically refresh Xcelsius SWF without logon prompt from Crystal2008Srv

    I'm demoing Xcelsius 2008 Enterprise using Live Office.  I have a live office Excel sheet with data and created a new Xcelsius project with a simple pie chart of the data.  I created a new refresh button in the project and connected it to my data via the Live Office data connection.  I then posted the resulting swf file to our Sharepoint 2007 server as a web part.  Now however the swf dashboard prompts me for a user ID and logon to see the dashboard every time.  How can I implement this dashboard so that the user sees it without needing to enter a logon.  See attached photo for example of what the dashboard is doing on refresh.
    Thanksm
    Dominic
    [Photo Example|http://picasaweb.google.com/lh/photo/oYcCqjRxrpyscd_YfnECTA?authkey=Gv1sRgCN2VwPCkz_O6kwE&feat=directlink]
    Edited by: DOMINIC CARISSIMI on Aug 17, 2009 6:59 PM
    Edited by: DOMINIC CARISSIMI on Aug 17, 2009 7:03 PM

    Dominic,
    Query-as-a-WebService is a tool that allows you to expose a Universe as a web service and in that way you can also leverage a Universe as a source for Xcelsius.
    You may wish to refer the link below...
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/0047b9a9-8397-2b10-5e9c-9d963c20e1e7
    -Anil

  • Multiple logon screen doesnt appear and session end in 30mins

    Hi all,
    I have a problem with my login session.
    Multiple users use the same SAP USER ID to logon. but when i try to logon ( even when others are logged on d same id) i dont get the option for multiple logon screen to terminate/continue without ending the other logons but i get to logon directly without this screen as if i am the only user of this id.
    but when others try to logon (when others are logged on the same id) they get the screen of multiple logon with options.
    and my session termiates after every 30mins but their sessions continue without any termination. please note that no one termites the session by themselves.
    I am not able to figure out what is happening. I changed my pc, my gui, updated to the latest patches, changed the lan ports but nothing changes. i continue to face the same problem. please provide d needful solution.
    thanks.

    Check these parameters
    login/disable_multi_gui_login
    Controls the deactivation of multiple dialog logons
    Available as of SAP Basis 4.6
    login/multi_login_users
    List of excepted users, that is, the users that are permitted to log on to the system more than once.
    Available as of SAP Basis 4.6
    Find the full list of relevant parameters at:
    http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm

  • SAPGui for Windows Multiple Logon with Portal

    Hi,
    We are using SAPGUI for Windows in Portal in the external window, we are also using it the SAPConsole form the desktop. While using from desktop, the multiple logon (within same client) complains / comes with the pop-up with two standard options.
    We would like achieve the same functionality of popup (Restricting multiple logons for the same client) within the portal, any ideas?
    I came across certain threads and also notes but none seem to provide a solution....
    [Restrict multi logon to R/3 system from portal using single sign on.    |Restrict multi logon to  R/3 system from portal using sigle sign on.;
    [SAP GUI 7.10 and SSO - multiple logons issue. How to restrict it?    |/thread/1623980 [original link is broken];
    Note 142724 - Prevention of multiple SAPGUI logons
    Thank you in advance.
    Best regards,
    Dharmi
    Edited by: Dharmi Tanna on Jun 25, 2010 2:09 PM

    Lonny,
    The best way to authenticate users when they logon using SAP GUI for Windows, is to use SNC authentication in SAP GUi. Then, the browser iview will launch the GUI and the GUI will authenticate the user using their AD credentials issued during the Windows logon. You will need to setup an SNC library on both the ABAP system which the user is logged onto, and the workstation where SAP GUI is installed.
    If you don't use SNC, and you just launch SAP GUI for Windows from browser, then an SSO2 ticket is used to authenticate the user to the ABAP stack, and this is not secure due to the fact that the SAP GUI session which is used to pass the SSO2 ticket is not protected - anybody can intercept the SAP GUI session, take the SSO2 ticket from this traffic and logon as that user - clearly this is bad security and needs SNC to make it secure.
    Thanks,
    Tim

  • How to block the multiple logons with NWBC?

    Hello,
    With Sapgui we have the possibility to prevent the multiple dialog logon by profile parameters (login/disable_multi_gui_login).
    How to prevent the multiple dialog logon using NWBC to the same system?
    Best regards
    Frédéric Blaise
    e-Kenz S.A.
    Luxembourg

    Hello,
    I opened a ticket at Sap but unfortunately they do not have a solution even if the problem is known.
    "Unfortunately, due the HTTP protocol nature, is not possible to force a single logon via web browser. The profile parameter login/disable_multi_gui_login is solely valid for SAPGUI logons."
    "Since this case is known since the Web Application Server was created, I am pretty convinced that SAP knows about the fact that multiple logons cannot be blocked (you can only give a warning for the user)."
    Since we monitor multiple connections with the SM04 transaction and notify customers that they may be controlled by Sap.
    Best regards
    Frédéric

  • Calling custom screen inside a function module

    This is regarding calling a screen as a pop up from a function module.How do I capture the values that would be entered in the fields of that pop up screen?Do I use ABAP memory or SAP memory or is there any other alternative?Please suggest.

    Hi savitha,
    When you create the Custom Screen, you can attach that custom screen to the main program of the function module itslef.
    The TOP Include variables can be used as screen fields and hence you don't need to store the data entered in the screen, anywhere else.
    The data will be readily available in the global variables itself in the whole function group..
    Thanks and Regards,
    Kunjal Patel

  • Call Pop-up Dialog created in SE51 from report

    Hi All
    I've created a screen YTESTPOP screen number# 5005 of type 'Modal dialog box' and assigned the elements. Now i want to call this screen as a pop-up from a report say ydisplay_arrears. Though i had followed all the seting when i call the screen using call dialog it is not taking the shape of a pop-up window rather it is coming up as a full screen. not sure what i'm missing with. any inputs on this?
    pls do not give sugestion as use popup function module (i'm aware of it) and it is not desired for my requirement.
    thkx

    Try this way
      call screen 5005 starting at 7  8
                      ending   at 77 13.
    a®

  • Access my 6.4 mini sap from Internet

    I've just installed my 6.4 mini sap and I would like now to access it from Internet.
    My computer at home (that has SAP installed) is 100% online. I would like to access it on the go.
    What would be my options?
    Any suggestions?
    Thanks
    Leonardo.

    You need to be able to see your home computer from the internet, so basically if you have a firewall you need to allow it access through the firewall.
    Ports should be
    33xx
    34xx
    36xx
    where xx is your system number.

  • How to edit "license information for multiple logon" screen

    hey gurus
    i need to know how to edit or modify the 'license information for multiple logon" screen. this screen usually pops up when a user tries for a multiple logon to sap. We have activated the parameter 'login/disable_multi_gui_login' but we would like to modify the screen in such a way that only one radio button which says 'terminate this logon' should exist. we would prefer to remove the option of 'continue with this option and end any other logon'. Now i searched but i could not find anything to implement this so i am here and i need your advice and suggestions.
    thanks in advance.
    cheers.
    nate

    hey bernhard
    many thanks for your reply..i appreciate your help. its just that its not explicitly mentioned we cant modify the screen in the note.
    Is there any other note that specifically say so?
    thanks for your time buddy.
    regards

  • How to suppress License Information for multiple logon screen?

    Hi,
    While LOGIN we will get "License Information for multiple logon screen" will displayed.
    How to suppress that screen.
    Regards,
    Bala

    >
    bala virupaksha wrote:
    > Hi,
    >
    > While LOGIN we will get "License Information for multiple logon screen" will displayed.
    > How to suppress that screen.
    >
    > Regards,
    > Bala
    and why would you want to do that?
    does your contract with SAP say, that you may use multiple logins for free? would SAP's contract-issue department agree that -in your case- it's not necessary to record multiple logins?
    have you read this part of the SAP license policy?
    SAP gives express notice that the accessing of a system by more
    than one person using one and the same named user constitutes
    a breach.
    tell me this does not apply to you ...

  • Disable multiple logon from SAP NetWeaver Portal

    Hello
    I'd like if there is a parameter inside SAP NetWeaver Poral to disable multiple logon with the same account(like login/disable_multi_gui_login for ABAP).
    Thanks in advace
    Regards
    Stéphane

    Look at service.sap.com
    This authentication only works for S-users (as well as SAP employees) who are active accounts in SAP's AD. That works via the internet for SAP customers and employers (e.g. from each other's networks but their own devices) as well.
    With a SAML IdP you have a lot more flexibility in choosing the source of the first authentication and managing complex access rights through to the backend.
    But you are correct: if there are not too many users to manage and they are smart enough to periodically generate a client certificate and they are physically attached to their own personal devices, then a Certificate Authority or even Open SSL solution is another option.
    I guess it would be usefull to know how many users there are and how the authentication through from the NW portal to the ABAP backend system is going to replaced. Also how much user context information is needed on the backend system still, if at all anymore.
    I think we need more information here still before we can safely conclude that a client certificate is appropriate for an internet scenario.
    I am more worried about all those issues like stolen certificate and so on.
    From my SDN experiences it is more often a case of people loosing their certificates and user IDs than one of other people stealing them..    The vaste majority of the 2 million users are using passwords and those who are active seem to be happy with the password reset service --> also an option.
    Cheers,
    Julius

  • Allow Multiple logons in SAP

    Hi,
    I need to allow a particular user to allow multiple logons to sap system.
    can anyone help me, how to proceed about this.
    Thanks,
    Sailesh K

    Hi Sailesh,
    If you only want particular users to be able to logon multiple times use parameter login/multi_login_users and the value will be the usernames separate by a comma
    For more see,
    http://help.sap.com/saphelp_nw04s/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm
    Hope this help!
    Juan
    Please reward with points if helpful

  • HT201328 after clicking on ''reset all'' on my iphone4,it has refused to come on. All i see is a prompt on the screen asking me to connect to iTunes. I cant make any calls or do an6ything with the phone. Anone with any advice?

    After clicking on ''reset all'' on my iphone4,it has refused to come on. All i see is a prompt on the screen asking me to connect to iTunes. I cant make any calls or do an6ything with the phone. Anone with any advice?

    Hi Tonma,
    Sounds like your device is in recovery mode. Follow the instructions in this article:
    http://support.apple.com/kb/ht1808
    Cheers,
    GB

Maybe you are looking for