Single Singh On (SSO) for BPC 7.0 MS version

Hello,
I'm using BPC 7.0 (MS version).
I'd like to try Single Sign On (SSO) on BPC 7.0 Microsoft platform.
When my company use Active Directory,
how can I configure SSO with BPC ?
Thank you.
Koji Nagai

Hi Koji,
You need to disable the SOX compliant if you dont want to be popped up with login details again and again.
1. From the Windows Start/(All) Programs/ SAP menu, select Server Manager.
2. Select Options > Client Options. The Client Options page is displayed.
3. Select Disable server to be Sarbanes-Oxley compliant if you want all clients that access the server to challenge all users for a user name and password.
Hope this helps.
Regards,
Poonam

Similar Messages

System sizing for BPC 7.0M MS version

Hi, Sirs
In the Scalability Guidelines (Section 2.3) of the Master guide for BPC 7.0M
follwing 3 elements are described in the matrix as key factors for system sizing.　
For example, Medium BPC install
1. Concurrent users = More than 75 concurrent users
2. Cube size < 1.5GB
3. Largest Fact table < 50000 rows
We have plan to install BPC 7.0M SP05 and followings are our estimation for system sizing.
1. Concurrent users = 76 concurrent users
2. Cube size = 800MB
3. Largest Fact table =144000 rows
'Largest Fact table' exceeds the value of Medium BPC install,
but we'd like to use servers which is described for Medium BPC install.
Would you please inform me the impact of the excess on system sizing?
Thank you for your support in advance.
Best Regards
Hiro

It will be any problem if the sizing exceed the recommendation. Actually is a good practice because it allows you to increase the number of users without any changes into landscape later on.
From the performances point of view the system will have the some performances if you will use the sizing recommended by SAP.
On the other hand if you will not follow the sizing guide and you will use smaller server than recommended then it is possible to have bad performances into system.
I hope this it will help.
Kind Regards
Sorin Radulescu

BI to BPC 7.0 MS version data integration and direct connectivity?

Dear All,
I need some valubale and proper information about the BI to BPC 7.0 (Microsoft)integration?
As i have already gone through forum threads and read blogs stil i dint found any solution to our requrirement.
Is it possible to have a direct data transfer between BI to BPC 7.0(MS version)? I understand that data can be extracted from BI cubes into files and then uplod into BPC. Is there any other ways to bring data directly from BI into BPC 7.0?
Any connectors or plugins has been release in the market so far?
As per our understanding right now in the market for BPC 7.0(NW Version) everything is available but for BPC 7.0 microsoft version if any body as implemented or having any docs or related to that will be great helpful if you can share the same to me.?
IF its not aviailable in the market what could be alternative option to go ahead with the same version?
Thanks a ton in advance.
RK.

Rakesh,
There is nothing delivered within the products that seemlessly integrates data from BI to BPC (MS ver). Besides the aforementioned good ideas about using open hub there are several 3rd Party companies that have an offering that will integrate data from SSIS packages on MS SQL Server from BI. Just search the internet (Xtract IS, iNet-BI, . . .). They all range in price and functionality.
Hope this helps.
Best Regards,
Kevin

SSO for JDeveloper application -- how?

Hello,
I am developing a servlet with JDeveloper & Struts, and I am curious whether it is possible to configure SSO and JDeveloper so that when I DEBUG the project and the embedded OC4J server starts, my application gets protected by the Single-Sign-On. That is, when I access http://<server>:8988/MYApplication/request.do?<params>, the SSO login page shows up, and after I type in correct login and pwd, my original page gets called again, only with the SSO cookie set this time.
I have all the things set up (infrastructure etc), and I guess if I go and deploy my application into Apache web folders, things should work -- but is there a way to do this with embedded OC4J server -- with its ports, etc?
Thank you very much,
Sasha.

Krrish,
For enabling security for your ADF application in JDeveloper use ADF Security wizard. Read this:
http://www.oracle.com/technology/products/jdev/howtos/1013/adfsecurity/adfsecurity_10132.html
You should set up your identity management with the application server.
(App Server Console->Administration->Identity Management)
You should set the identity management as the security provider of the ADF Application.
(App Server Console->Your Application->Security Provider)
You should have installed your APP Server in advanced mode.
You have to enable SSO for application server and define the ADF application as a partner application:
http://download-uk.oracle.com/docs/cd/B32110_01/web.1013/b28957/configldap.htm#BEHCGHHF
see Configure SSO (Optional) section.
Despite that, I myself have had problem making this work. I am using Identity Management 10.1.4.
Regards
Farbod

SSO for Web applications

Hi,
I want to implement SSO between my portal and web applications. i found some documents but not sufficient information. what would be the correct source of information if i want to impalement SSO between Portal and Web server(non SAP).
Any help is appreciated.
Thanks,
Damodhar.

Hi,
i have gone through the some documentation, i am giving the links to help for the others if anyone go through this thread in future.
Logon tickets for the sap and non sap systems, it's good.
SAP Logon Ticket-based Single Sign-On
SSO with SAP logon ticket- Security issues
SSO with SAP Logon Ticket - security issues
we have another document but the document has been moved to another link, can you suggest me link for the following document.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/enabling single sign-on from sap j2ee engine to non-sap java applications.article
the above link has been moved, can anyone suggest me the correct link for the above document.
Thanks,
Damodhar.

SSO for Oracle Apex application

Hi All,
I am working on the requirement where the client want to implement the SSO for the apex application which are in different workspaces.
But not using oracle SSO server :(
The Microsoft active directory is used for authentication.
Please give me some idea how to implement SSO for these apex applications.
Thanks & Regards,
Prutha

Hi,
I am trying to implement Single-Sign On for my Apex applications. Below are the requirement steps:
This is working fine within same WORKSPACE and on single DB, but I need to implement SSO across DB with different workspaces.
1. I have *2 Databases* DB-1 and DB-2. Both are different and running on different machines.
2. On Both DB's Apex is configured.
3. I have to deploy an app which uses internal Application Express account credentials for Login on DB-1
4. From DB-1, after login, I have to provide a link to open another Apex App deployed on DB-2
5. All Apex Apps on both DB's are using same Authentication Schemes.
6. In both DB's I have PAGE SENTRY function for session validation.
Can we configure Apex only once on both DB servers like RAC. Do we have any admin setting in Apex by which we can achieve th motive.
Please help me to implement such functionality using only Apex across different DB's and different Workspaces.
Thanks,
Ismail
Edited by: user9536278 on Mar 27, 2012 4:18 AM

SSO for application systems with local users?

Hi all, I'm new to Oracle Identity Management. My company is going to implement SSO for inhouse applications. However, some applications have their own local users (e.g. admin, guest, etc.) who have to login to the application system through the same interface. We put all organization users in an Oracle enterprise Directory server, which is the authentication backend of the Access Manager. After implementing webgate, such local users can't get authenticated. I'd like to know if it's possible to configure particular users/applications to bypass SSO and use local authentication? Thanks.
Rgds
/ST wong

Possible solution is to create a new entry point for local users. Create two proxies one for actual user entry and another for local user. You can restrict n/w access to proxy with local login so that only few hosts based on your requirement who needs to access system with local accounts. This way you will have two web sites for single application.

IdM 7 and SSO for legacy applications

Dear experts,
Per SAP NetWeaver 7 documentation new approach allows SSO for any legacy applications without a need for a 3rd party IdM solution.
Could someone explain how this is handled? Does evary non-SAP application need to become aware of SAP IdM credential store and be able to interact with it, or some other - non-intrusive approach is being used?
Thanks in advance,
Eugene.

Hi Eugene,
SAP NetWeaver Identity Management 7.0 handles the provisioning of users (identities) for a heterogeneous landscape. Authentication and Single Sign-On (SSO) is being handled within the SAP NetWeaver platform. So introducing SAP NetWeaver Identity Management itself does not introduce additional SSO functionality.

URGENT: SSO for multiple Applications

I have integrated 4 different applications in a single domain with OAM for SSO.
Individually all apps are working fine (for SSO). Now I want to Apply only single login for all the applications. So what changes need to be done in OAM side?
Continuing to my above Question. For the first time if I access application A, Authentication should be done and if I access Application B, C, D no authentication should be done
and What changes to be done for Single Log OUT.
Help me what to do for SSO for all the applications.
Thanks
Ajay
Edited by: 915734 on Mar 12, 2012 7:57 PM

You have to configure single sign-on policy for same
Go through the blelow documents
http://docs.oracle.com/cd/E14571_01/doc.1111/e15478/sso.htm#BJFGFBDC
http://docs.oracle.com/cd/E14571_01/doc.1111/e15478/intro.htm#BABCDGEH
http://docs.oracle.com/cd/E23943_01/core.1111/e10043/osso_b_oam11g.htm
http://docs.oracle.com/cd/E24269_01/doc.11120/e24477/sso.htm

Can Captivate pull a user's login information from a Single Sign On (SSO) page?

Looking to start pushing out quizzes and trainings via Captivate. We currently do not have a LMS, so I started testing using Acrobat.com. We have a Single Sign On (SSO) page that passes our users credenitals on to all the sites and apps. Is there a way for Captivate to get those credentials, when submitting quiz results? Do they have to submit their quiz answers via an Acrobat sign in? Can Captivate auto submit answers or does the end user have to hit the Submit/Submit All button?

Hi there,
There is no native feature for getting SSO information in Captivate course.
If you don't have an LMS, and if you would like to use Acrobat.com reporting, then learner will have to click on the post results button, and enter their Adobe.com or Acrobat.com credentials, then hit submit. (Learners must have an Account on Acrobat.com or Adobe.com to submit the results.)
If the course will be accessed within the organization's network, then you can also use Internal server reporting, that works exactly same except learners do not need an account on Adobe.com
They will have to enter their Name and E-mail address to niquely identify them while fetching result reports.
Thanks.

CRM single sign on (SSO) to R/3 system via ITS 6.20

Hi all
I try to configue CRM2007 single sign on (SSO) to R/3 system via ITS 6.20.
my configuraion process
1. on CRM2007
-profile : login/accept_sso2_ticket = 1
              login/create_sso2_ticket = 2
- t-code : strustsso2 --> export system PSE
2. on R/3 system
- profile : login/accept_sso2_ticket = 1
               login/create_sso2_ticket = 0
- t-code : strust --> import certification --> add certification list --> save
- t-code : oss2 --> execute with crm rfcdestination --> all green.
3. ITS
~appserver      r/3.domain
~client
~clientcert      1
~cookies      1
~exiturl
~hostsecure      itshost.domain
~hostunsecure      itshost.domain
~language
~login
~logingroup
~messageserver
~multiinstanceservices      1
~password
~portsecure      443
~portunsecure      80
~routestring
~runtimemode      pm
~systemname      R/3 SID
~systemnumber      R/3 system no
~theme      99
~timeout      600
~urlimage      /sap/its/graphics
~urlmime      /sap/its/mimes
~usertimeout      240
~xgateway      sapdiag
~xgateways      sapdiag,sapxgwfc,sapxginet,sapextauth
~mysapcomgetsso2cookie
~mysapcomusesso2cookie 1
~mysapcomssonoits 1
for SSO check, execute web ui and then log on web ui
I go to the Interation center and then go to the ERP information.
but ITS log on screen appear.
crm user and r/3 user is same.
how can I do ??

You use Server Port 3600, message server.
It means, while creating a system you used wrong template and picked "SAP system using dedicated application server".
You should use "SAP system with load balancing", since message server is doing load balancing.
Once you selected correct template you will see "Message Server" instead of App and GW servers.
Make sure to fill in
Group - Logon group to use. If not defined in R3, use SPACE
Message Server - ansapdev01
SAP Client = 150
SAP System ID <SID> = DEV
Server Port 3600
System Type = SAP R/3
It should work.
Regards,
Slava

How to use SSO for some sites

I have one SSO certificate provided in IE and some of my corresponding sites refer to this SSO while logging in.
This works perfectly well in chrome as well, however same sites do not recognize SSO certificate and prompt for Logon credentials while accessing in firefox

Hi Daniel,
Yes, you can use SSO for your purpose. One of the over-looked features of SSO is to use as configuration store. Especially for storing the credentials for accessing your external
systems.
Create an
affiliate application in SSO and save your credentials in there. And in send port, under security tab you can select the affiliate application to use the credentials.
Read this article on this topic. This article gives you the detailed information starting from access required to create affiliate application, ways to read data
from SSO.
Building and Executing
a BizTalk Single Sign On Scenario
Single Sign-On Support for the WCF Adapters
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Single Sign-On (SSO) in Web Server 7.0u5

Hello,
I am in the process of trying to configure single sign-on (SSO) between several apps in the same SJWS 7.0u5 virtual server, and I'm not having much luck. This appears to be very similar to the problem reported in another thread (http://forums.sun.com/thread.jspa?forumID=759&threadID=5281564) that applied to 7.0u2.
I found one interesting detail that the previous post did not mention, however, and I think it is key to resolving this issue.
I've been using the SSO feature of WS7 since day one, and up to this point is has worked flawlessly. However, I am in the process of adding a new webapp that differs from the prior webapps in one significant way: it uses form-based login, and all the previous webapps used basic authentication.
Using the "Live HTTP Headers" Firefox add-on I captured the cookie exchanges between the client and server, and this is what I see:
1. Logging in to any of the apps that use basic authentication results in both the JSESSIONID for the current webapp and the JSESSIONIDSSO for the entire server to be returned in the response.
2. If I then go to a secured URI in the new (form login) webapp the JSESSIONIDSSO cookie is sent, but I still land on the login page.
3. When completing the login form and submitting it, no JSESSIONIDSSO is returned.
In both types of apps, my web.xml includes the appropriate configuration. FORM authentication: <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>ldap</realm-name>
    <form-login-config>
      <form-login-page>/login.jsf</form-login-page>
      <form-error-page>/error.jsf</form-error-page>
    </form-login-config>
</login-config>...and BASIC authentication: <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>ldap</realm-name>
</login-config>From this, it appears as though the SSO functionality is not working when using FORM authentication, only when using BASIC authentication.
The web apps developer's guide specifically says that SSO works for all webapps in the same virtual server with the same realm-name, which is certainly the case for me. It doesn't say that SSO is not supported in FORM-authenticated webapps, but that would appear to be the case.
Or is this a bug?
Or am I simply doing something obviously wrong?
Thanks!
Bill

In addition, I set the logging level to "fine", and I see these entries for the FORM authentication:
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Process request for '/testSso/'
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Checking for SSO cookie
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: SSO cookie is not present
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Security checking request GET /testSso/
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports:   Matched constraint 'SecurityConstraint[secureURIs]' against GET /index.jsp
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports:   Matched constraint 'SecurityConstraint[secureURIs]' against GET /index.jsp
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Calling hasUserDataPermission()
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports:   User data constraint has no restrictions
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Calling authenticate()
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Restore request from session '19FFE2F63CF4E8756C19B60AC6F7A65E'
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Authenticated 'testUser' with type 'FORM'
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Registering sso id '2698AFCE8889EF9877778386855517BC' for user 'testUser in realm ldap' with auth type 'FORM'
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Associate sso id 2698AFCE8889EF9877778386855517BC with session StandardSession[19FFE2F63CF4E8756C19B60AC6F7A65E]
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Proceed to restored request
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Calling accessControl()
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports:   Checking roles testUser
[06/Sep/2009:22:52:57] fine (20013): for host 127.0.1.1 trying to GET /testSso/index.jsp while trying to GET /testSso/, service-j2ee reports: Successfully passed all security constraintsThat seems to indicate that an SSO ID is created and a cookie should be sent with the response, but as show in the Live HTTP Headers output, that is not the case.
The log entries for the BASIC authentication are as follows:
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Process request for '/ppc/'
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Checking for SSO cookie
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Security checking request GET /ppc/
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports:   Matched constraint 'SecurityConstraint[ppc]' against GET /index.jsp
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports:   Matched constraint 'SecurityConstraint[ppc]' against GET /index.jsp
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Calling hasUserDataPermission()
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports:   User data constraint has no restrictions
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Calling authenticate()
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Logging in user [testUser] into realm: ldap using JAAS module: ldapRealm
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Password login succeeded for : testUser
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Authenticated 'testUser' with type 'BASIC'
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Registering sso id 'A58B93F0A00C619AF18F53C2F7C00D16' for user 'testUser in realm ldap' with auth type 'BASIC'
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Associate sso id A58B93F0A00C619AF18F53C2F7C00D16 with session StandardSession[EF2E1F7E8B3FB7E3FDD4607E4A62D99E]
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Calling accessControl()
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports:   Checking roles testUser
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: No role found: administrator
[06/Sep/2009:22:57:29] fine (20013): for host 127.0.1.1 trying to GET /ppc/index.jsp while trying to GET /ppc/, service-j2ee reports: Successfully passed all security constraintsIn this case, you can see that the SSO ID that is generated matches the value set in the response.
Bill

Implementing Single Sign-On support for the Oracle E-Business suite

Implement Single Sign-On support for the Oracle E-Business suite
I want implement Single Sign-On support for the Oracle E-Business suite.
Operationg System : linux/Solaris
Oracle E-Business suite : 11.5.10
Oracle Application Server : 10gAS(latest availble)
Type of integration : SSO and OID with 11i
No third party SSO or LDAP
Qusetions
1.If my SSO Server is down can i login to applications(11i) using normal mode(default login http://servername.xxxx.com:8000/).
2. Is it possible to have appilications (11i) in Linux/Solaris and 10gAS in windows.
Please answer...
NOTE:
I am following Oracle METALINK Doc.Id 233436.1 and 261914.1.
Thank you.
MARK

You couldn't login into server But You can use the following login
http://servername.xxxx.com:8000/AppsLocalLogin.jsp
For this you need to enable the Appslocallogin Profile option

Please help : "Configuring Windows SSO for Sun portal server 7.1"

Hello friends,
I have a problem when create Single Sign On ( SSO ) on the portal server 7.0
If you have configured successfully.Please give me the way you have used.
Thank you very much.
DungT
Related document and information :
http://docs.sun.com/app/docs/doc/819-4670/6n6qardtu?a=view#gbaqc
http://forum.java.sun.com/thread.jspa?threadID=5140689&messageID=9519196
Edited by: dungtran on Mar 13, 2008 4:35 AM

There is a ZIP Install available for Windows that bundles the Access Manager, Directory Server,and Portal Server in a pre-configured deployment. Try this download instead:
PS 7.1u1
[https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_us/-/USD/ViewProductDetail-Start?ProductRef=PortalSvr7.1U1-OTH-G-F@CDS-CDS_SMI]
PS 7.2
[https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=PortalSvr7.2-OTH-G-F@CDS-CDS_SMI]
- Jim

Single Singh On (SSO) for BPC 7.0 MS version

Similar Messages

Maybe you are looking for