SSO between a Java EE application (Running on CE) and r/3 backend

Hi All,
Over the past few days I have been trying to implement a SSO mechanism between NW CE Java Apps and R/3 backend without any success. I have been trying to use SAP logon tickets for implementing SSO.
Below is what I need:
I have a Java EE application which draws data from R/3 backend and does some processing before showing data to the users. As of now the only way the Java App on CE authenticates to r/3 backend is by passing the userid and pwds explicitly. See sample authentication code below:
BindingProvider bp = (BindingProvider) myService;
Map<String,Object> context = bp.getRequestContext();
context.put(BindingProvider.USERNAME_PROPERTY, userID);
context.put(BindingProvider.PASSWORD_PROPERTY, userPwd);
Now this is not the way we want to implement it. What we need is when the user authenticates to CE ( using CE's UME) CE issues a SAP logon ticket to the user. This ticket should be used to subsequently login to other system without having to pass the credentials. We have configured the CE and Backend to use SAP logon tickets as per SAP help.
What I am not able to figure out is: How to authenticate to SAP r/3 service from the java APP using SAP logon tickets. I couldnt find any sample Java code on SAP help to do this. (For example the above sample code authenticates the user by explicitly passing userid and pwd, I need something similar to pass a token to the backend)
Any help/pointers on this would be great.
Thanks,
Dhananjay

Hi,
Have you imported the java certificate into R/3 backend system ? if so.
Then just go to backend system and check on sm50 for each applicaion instance of any error eg.
SM50-> Display files (ICON) as DB symbol with spect.(cntrlshiftF8)
You will get logon ticket details.
with thanks,
Rajat

Similar Messages

Install Acrobat 7 and CS2 applications - running Windows 2000 and IE 6

need to install replacment Acrobat 7 and CS2 applications - running Windows 2000 and IE 6. Any problems with this?

http://web.archive.org/web/20070203090721/http://www.adobe.com/products/creativesuite/syst emreqs.html

USING SSO TO SECURE THE WEB APPLICATION RUNNING ON JBOSS/WEBSPHERE

We are using Oracle portal for all our applications. We have Oracle Application Server, portal, SSO and OID installed. Basically the user should login through
protal, and the authentication is done by SSO against OID. After the authentication, the user accesses the portal home page. From the home page, there are application links. By clicking these application links, the user should be able to access the applications. But these applications are running on JBoss and WebSphere. Is there any way that we can secure these applications
by Oracle SSO?
I know that there is a plug-in (mod-osso) running on the Oracle Web Server to fulfill the tasks like directing the request to the single sign-on server,
authenticating, putting sso cookie into the session if authentication is successful. So the Oracle Web Server will take care of the authentication for all partner applications.
There is no such plug-in released for the web server of JBoss or WebSphere. Anybody has the experience or suggestion on how to solve our issue?
Thanks!

Hi,
Have you imported the java certificate into R/3 backend system ? if so.
Then just go to backend system and check on sm50 for each applicaion instance of any error eg.
SM50-> Display files (ICON) as DB symbol with spect.(cntrlshiftF8)
You will get logon ticket details.
with thanks,
Rajat

Java desktop application run problem

Hi.
I have designed java desktop application which includes some libraries (XMLparserV2.jar, Ojdbc6.jar,xdb.jar, Orai18n-mapping,jar) with XML ini file.
Then I have done deploy to jar. After it I relocated jar file and XML ini files to separate directory and ran javaw -jar myjarfile.jar. I can't see anything.
Where I can see any errors ?
Thanks for reply in advance.
Andrii.

Try running java -jar myjarfile.jar from the command line and see if you get any errors showing up (probably missing classes in your path)

Sun Java System Application Server 9.1 and Apache

Hi,
I'm running Sun Java App Server 9.1, now I want to redirect the incoming traffic from an apache machine to the App Server.
Which is the procedure? I did it before between Tomcat and Apache, I will appreciate your comments.
Best regards,
Gerardo

Gerardo,
You may already have found the solution, but you can use ProxyPass and ProxyPassReverse in your apache config to forward traffic back to your appserver. For example, in your apache httpd.conf file:
ProxyPass /app1 http://10.0.1.100:8080/app1
ProxyPassReverse /app1 http://10.0.1.100:8080/app1
ProxyPass will hide your appserver and port details and use your apache server's address. Naturally, your httpd executable will need to have mod_proxy loaded up.
Henry

[SOLVED] Sun Java System Application Server 9.1_01 and Oracle 11g:ORA-01017

Hi,
I'm trying to create a connection pool for an Oracle database (SID orcl) located on the same host as the application server.
I provide the following database URL: jdbc:oracle:thin:MYUSER/myuser@localhost:1521:orcl
(username/password MYUSER/myuser do exist, and connection is granted:
grant connect to MYUSER;
When I try to ping the connection pool, I get the following error: ORA-01017: invalid username/password; logon denied
What's wrong?
Thanks,
Dmitriy

...No :-)
Sun's app server (based on GlassFish) definitely tries to receive a Connection object from a javax.sql.DataSource object, not DriverManager (see sources, http://fisheye5.cenqua.com/browse/glassfish/appserv-tests/devtests/connector/embeddedweb/ra/src/com/sun/jdbcra/spi/DSManagedConnectionFactory.java?r=1.1.1.1 - createManagedConnection function:
82      if ( isEqual( pc, getUser(), getPassword() ) ) {
83      dsConn = dataSourceObj.getConnection();
84      } else {
85      dsConn = dataSourceObj.getConnection(pc.getUserName(),
86      new String(pc.getPassword()));
87 }
The problem is probably caused by some kind of wrong parameter passing.
Message was edited by:
DmitM

SCCM 2012 application run Powershell script and return codes

Hi,
I created an new application (imported as MSI) in SCCM 2012R2. After import I changed the deployment type installation program to run a Powershell script: powershell.exe -ExecutionPolicy Unrestricted -File "Install FactSet 2013 5I.ps1
My goal is to close some processes before installing the MSI. This works. But on a failure the application program also return code 0 (AppEnforce.log). Is it possible to pass the MSI return codes to SCCM.
Maybe anyone had the same or idea's to solve this? Thanks in advance.
Regards,
Peter
Powershell script code:
$ExitCode=0
Function
Stop-RunningApplication{
Param(
[parameter(Mandatory
=$true)]
[string]$ProcessName#
Specify process names separated by commas
# Split multiple processes on a comma and join with the regex operator '|' to perform "or" match against
multiple applications
$processName=$processName-split(",")
-join("|")
$process=Get-Process|Where{
$_.ProcessName
-match$processName}
|Stop-Process-Force
#Stop running processes
Stop-RunningApplication
-ProcessName"excel,outlook,fdsw32,marquee,POWERPNT,WINWORD"
#Install FactSet 2013 5I
$ExitCode
=(Start-Process".\FactSet_Setup_2013_5I_x644.msi"'/qn
FACTSET_CLOSE_PROCESSES=1 /l*v C:\Temp\InstFac20135I.log'-Wait-Passthru).ExitCode
Environment]::Exit($ExitCode)
Peter vd Bosch

It's really hard to tell from the code above because of the way it's listed, but are sure that even executes? I see at least one stray curly brace and a stray square bracket.
For the Start-Process cmdlet, have you tried without the -passthru parameter?
Also, using the actual parameters will make the code much more readable instead of relying on position.
Jason | http://blog.configmgrftw.com | @jasonsandys

Any difference between Sun Java System Web Server - Update 1 and update 2

Any configuration changes need to be made particularly for Sun Java System Web Server - Update 2 in the load balancing. because i face issue in load balancing with Sun Java System Web Server - Update 2 , but load balancing is working fine with Sun Java System Web Server - Update1

using Sun Java System Web Server - Update 2 as forward proxy. and here is my obj.conf file entries
# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# You can edit this file, but comments and formatting changes
# might be lost when you use the administration GUI or CLI.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Program Files/Sun/WebServer7/lib/icons" name="es-internal"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log"
</Object>
#this line was added for weblogic clustering
<Object name="webapp" ppath="*/webapp/*">
Service fn=wl_proxy WebLogicCluster="ip:7002,ip:7003"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="send-precompressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object name="tunnel" ppath="*/HTTPClnt*">
Service fn=wl_proxy WebLogicCluster="ip:7002,ip:7003"
</Object>

Hi, how to develop application , matching of userid and password to backend

hi masters ,
              , user have to give userid and password of back end sap system to see particular report. i mean there is a first view ( this first view muust not be first screen of portal ) with userid and password fields . after gave his id and password he can go to second view to see the particualr details .please suggest me about how to do custom bapi code and , in also webdynpro java how to develop .
           i know about sso. in this concept i have to use through webdynpro java only. no need of sso concept here .
          after giving the userid and password , those details must be match with backend sap database.if no one of userid and passwrod field is matching it has to show some error message. and in password field must be in encrypted letters .

hi surya,
Use JCO api to create connection to the backend.
[JCO tutorial|http://www.apentia-forum.de/viewtopic.php?t=1962&sid=9ac1506bdb153c14edaf891300bfde25]
On the webdynpro screen you can ask users to enter login id and password. Use this information to create connection to backend using JCO.
Hope this helps!
Monalisa

SSO to partner application running under IIS

Hi,
We have a complete set-up for 9iAS Release2 where some applications are running. In parallell we have an application running under IIS, and would now like to enable the IIS application as a partner application to 9iAS letting the 9iAS SSO server handle the authentication.
In the documentation of Oracle Proxy Plug-in I read that this proxy plug-in can be used to proxy requests from IIS to Oracle http server (OHS) and also in this way enable SSO.
My question is if this can be done only for applications running under 9iAS but having IIS as web server, or if it is also possible like in our case to enable SSO via the proxy plug-in to applications runnind under IIS?
If this is not supported is the only available solution to use the SSO SDK in my IIS application?
Thanks and regards,
Rikard

Here's a DIY answer.
See Metalink Note 269820.1 which shows you how to use Perl to overwrite the host name in the HTTP header and remove the port number.

SSO between EP and GRC systems

Hi,
We have EP 7.0 and GRC 5.3 systems in our landscape. In the login page of the portal, we have a link configured to the GRC system to use the Compliant User Provisioning application.
On clicking the GRC link for accessing CUP, the user is prompted to enter the username and password to login to the GRC system. In our landscape both the EP and GRC systems have the ECC ABAP system as the UME and hence the user credentials are exactly the same for both EP and GRC systems for a particular user.
I would like to avoid another logon for the user in GRC as he has already logged in with the same user credentials in EP system.This, i believe is achieved through SSO but i'm not sure about configuring SSO between two Java systems.
Please help me in the configuration.
Regards,
Ragav

Ragav_ss wrote:
Everything is working fine when i click User Logon link in GRC system which comes up through the link from EP. The SSO is working fine there. But when i click Request Access or Request Status link, the SSO does not work.
Any clues.
GRC version is 5.3 SP 12
Did you ever get that resolved? I'm having the same problem with 5.3 SP 15.
Regards,
Sean

How get a java app 2 run invusibly

how do i get my java app to run at startup and behind the scenes

Don't give the application a GUI. Make an executable and place it in the startup folder.
DeltaCoder

How to start/stop/restart a java desktop application from remote machine

Hi,
I want to know is there a way in java where i can start/stop/restart a java desktop application running on a remote machine through another java desktop application?
For e.g i have an Admin console which monitors its clients based on socket communication, all of them are java desktop applications. I want to also give start/stop remote clients through my Admin console.
I am thinking in terms of windows system service which can start/restart/stop my clients on request of Admin console, but how can i call this system service remotely?
How can i do it?

I got it. its about connection...

How to launch a Java WebStart application with older JREs when Java 7u25 is on the client?

How can I launch older versions of my Java WebStart application, that are built and run with Java 7u21 or earlier, even if Java 7u25 is installed locally on the client? Application launch and behaviour must be reliable and consistent.
Background:
As of 7u25 (and later), Java Webstart applications launch with a different class loader than pre-7u25.
My Java Webstart application has supported versions that were built with older versions of the JDK (e.g. Java 5, 6, 7u21 or earlier). These applications run with their required JRE version, enforced through JNLP. Once Java 7u25 is installed locally, these older applications fail to launch, due to classloader differences.
The question is: what is required to run older Java WebStart applications even if 7u25 (or later) Java Webstart is installed locally on the client?

I confirm your findings when using shortcuts to try specific versions of JavaWS with 7u25 or later installed:
JRE 5u14 launched and the classloader was as pre 7u25
JRE 6u43 would not launch
JRE 7u21 launched but the classloader was not as pre 7u25
You can launch the shortcut with the JavaWS -verbose option to display a messagebox with valuable information.
I am keeping a close watch on this thread.

Slow start-up for JSF projects on Sun Java System Application Server 8.2?

App. Server: Sun Java System Application Server 8.2
I really don't understand why a JSF project starts-up so slow on Sun Java System Application Server 8.2.
I've gone through the "Overview of Sun Java System Application Server Performance" guide and tuned my server.
It's not memory or processor, I am developing on a SunOS 5.8 Generic_117350-27 sun4u sparc SUNW,UltraAX-MP.
The JSF project contains one index.jsp and one login.faces - that's it. But it takes up towards 15 seconds to load the page, if I type:
http://<domain>:8080/login/
I would believe that the application should be a lot faster.
What can I do to solve this?
Thanks,
--Todd

Yes I am.
Right now I have:

<servlet>
      <servlet-name>Faces Servlet</servlet-name>
      <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
      <load-on-startup> -1 </load-on-startup>
</servlet>
<servlet>
      <servlet-name>Persistent Faces Servlet</servlet-name>
      <servlet-class>com.icesoft.faces.webapp.xmlhttp.PersistentFacesServlet</servlet-class>
      <load-on-startup> 1 </load-on-startup>
</servlet>
<servlet>
      <servlet-name>Blocking Servlet</servlet-name>
      <servlet-class>com.icesoft.faces.webapp.xmlhttp.BlockingServlet</servlet-class>
      <load-on-startup> 1 </load-on-startup>
</servlet>

<servlet>
      <servlet-name>Transaction Browser</servlet-name>
      <jsp-file>/transactionbrowser.jspx</jsp-file>
      <load-on-startup> 1 </load-on-startup>
</servlet>It still doesn't work, so you may be right.
Thanks,
--Todd

SSO between a Java EE application (Running on CE) and r/3 backend

Similar Messages

Maybe you are looking for