SSO between CE 7.11 and EP 7.01

Hi Guys,
Can someone please provide the steps for SSO between CE 7.1 EHP1 system and Netweaver 7.0 EHP1 Portal?
I am quite confused how to do this SSO setup. Done for Portal and ABAP systems earlier but never for Portal and CE as both are AS Java.
Thanks,
Shitij

Hi Shitij,
Please check the below thread might help for configuring SSO between CE 7.11 and EP 7.01.
/message/8867312#8867312 [original link is broken]
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/45/2f873d1ca96d7be10000000a114a6b/content.htm
Hope it helps
Regards
Arun

Similar Messages

SSO between CE 7.1 and Portal 7.0!

Hi ,
I am accessing a WebService deployed on Portal 7.0 server from an EJB deployed on CE 7.1 server.
Can anyone please provide me some documents or steps to configure SSO between CE 7.1 and Portal 7.0 if the UserIds on both the servers are the same.
Regards,
Manish

http://help.sap.com/saphelp_nwce10/helpdata/en/43/2232900bb93fece10000000a11466f/frameset.htm
P.S.: Try searching help.sap.com and/or SDN first

SSO between custom C++ application and web browser

Hello.
I have a bit of problems figuring out how to do SSO functionality between a Browser and a custom client (custom protocol over HTTP).
I want it to work as follows: If the user logs in in the HTTP client, the user is already logged in in the custom client, and vice versa.
I thought this could be implemented my reading and writing cookie values from the browser in my custom client, but it seems like the cookies set are all without expiration. IE handles these cookies private in a process, and so I can't get a hold of it.
How do I implement SSO between clients if I can't base it on cookie values?
Regards
Kyrre.

Any comment?

SSo between Portal 6.0 and Portal 7.0

Hi,
We want to enable single sign on between Portal 6.0 and Portal 7.0.
Our scenario is, In Portal 7.0 on click of role or workset, Portal 6.0 have to be opened in a new window without asking user ID and Password.
What are the steps, I need to follow to achieve this.
Thanks & Regards,
Bala

Hi Bala,
This [thread|Re: SSO between ep6 and ep7]should give you a kick start.
Good Luck!
Sandeep Tudumu

My experience of SSO between SAP Portal6.0 and non-Sap Application

Firstly I announce that I am not a Sap developer or a Sap Consultant. I am a Cognos Consultant. I need do SSO between Sap Portal and Cognos Portal in my project, So I have to make SSO between two portals.
I tested SSO between the two products on IIS5 of Windows XP and IIS6 of Windows 2003 and passed.
Step 1: Copy sapsecin.exe and sapsecu.dll on any directory where you want, such as C:PortalSecurity
Then add this directory to your Environment variable PATH. You can find the two files on sapserv<x> under general/misc/security/SAPSECU/<platform>;
Step 2: Copy your Filter ISAPI Files IIS_SSO.dll or IIS6_SSO.dll in any directory where you want, such as C:PortalFilter. You can find this two files on SAP note 442401.
Step 3: Get you verify.pse which is located in
<irj>
ootWEB-INFpluginsportalservicesusermanagementdata and put it on the same directory with your ISAPI Files ,such as C:PortalFilter
(According Sap Support articles , IIS_SSO.dll should be used on IIS 5 and IIS6_SSO should be used on IIS 6,but I can not load IIS_SSO.dll on IIS 5 of Windows XP, I use IIS6_SSO.dll );
Step 4: Create a new file named verify.properties , the content of this file see the appendix A;
Step 5: Load the IIS6_SSO.dll on your IIS. On IIS5, Select Website PropertiesISAPI FilterAdd IIS6_SSO.dll and name it wp . On IIS6,do as such and Create a Web Extensions named wp and allocate file IIS6_SSO.dll. Finally restart the www service.
I
If you can load the filter successfully, you will see the filter color is green.
On IIS6,Maybe you find that you cant load your ISAPI file IIS6_SSO.dll, Its state is unloaded and its color is red. I am confused by this question long time. I finally found you must install some R3 dll files on your system! The .dll files which I mentioned can be found in SAP note 684106, put it in a same directory with your security files, such as C:PortalSecurity and restart your web server.
(The steps above I reference Chris beck s topic)
Step 6: I write an ASP file named headerdumper.asp on my website and create a i-view to show my asp file in SAP Portal. If you succeed, you can see the http header variable<your logon name> in ASP page. If you application can receive http header variables, then Congratulations! You have apply SSO successfully.
If your log file show Can't find MYSAPSSO2 ticket cookie for URI "" on host "", dont worry about it. I am confused by this question long time though. I found the key cause the errors are cross domain or different DNS suffix.
I tested 3 scenarios :
1 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://sap-server:80/headerdumper.asp, You cant access this asp page from i-view . I am sorry that I have no idea about this.
2 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://your-server:80/headerdumper.asp, Your log will show Can't find MYSAPSSO2 ticket cookie for URI "" on host "". because they have no domain name, which is seemed that they meant different domain.
3 you must deploy your asp file and sap portal like below ,So you can apply SSO correctly:
you must access SAP Portal like : http://sap-server.domain.com:50000/irj/portal
you must access your asp file like http://yourserver.domain.com:80/headerdumper.asp
then add your asp file as i-view to your SAP Portal which URL is like above , you can get Http header variable correctly.
I am not an native English speaker, I hope you can understand what I said.
Appendix A The Content of Verfy.properties
remote_user_alias=REMOTE_USER
pse_file=C:PortalFilterverify.pse
application=portal
log_file=C:PortalFilterverfy.log
log_level=3
cache_size= 1000
Appendix B The Code of headerdumper.asp

I'd recommend to cross-post your inquiry to the Security

Error while configuring SSO between Portal 7.0 and Operating System.

Dear all,
I am having an issue,i need to configure SSO between the Portal 7.0 and operating System.I have followed both the Kerberos as well as spNego wizard methods,but i am not able to configure UME settings as we are using datasourceConfiguration_abap.xml. I tried to edit the datasource confuiguration file but after editing the server is not starting.
Please let me know the steps i have to do to edit the datasourceConfiguration_abap.xml
We are not able to Map the Service USer to the UME CONFIGURATION XML File.
Thanks
Ravi.S

Ravi,
If you have successfully configured the SSO, please pass on the document if any you have.
Regards,
Mohammad.

Setting up SSO between Sun Web Server and MS6.0

Hi,
I want to set up a trusted SSO between Sun Web server 6.1 and the MS6.0.The document does not give enough information about this.Any one done this before?
Thanks,
Ramnath

I'd recommend to cross-post your inquiry to the Security

Establish SSO between OBIEE 10g/11g and SAP BW

We would like to know if there is a provision in SAP to use
Single-Sign-On mechanism between 3rd party reporting tool and SAP BW7,
where in the 3rd party tool uses XMLA connector.
The 3rd party tool that we are using is Oracle Business Intelligence
Suite Enterprise Edition Plus (OBIEE version 10.1.3.4.1) which connects
to SAP using XMLA connector.OBIEE is on Oracle Application Server (OC4J
server). We would like to now if there is single-sign-on mechanism
between OC4J and SAP.
If we use OBIEE 11g using Weblogic would we have any additional options
for single sign on with SAP BW7

Hi,
ABAP stack should support SAML in newer version (maybe 7.02). Anyway, SSO cookie has a simple structure and it's signed by private key. The receiving system just verifies signature using public key.I've seen somewhere on net that somebody uses proxy to authenticate user, generate SSO ticket and redirect user to SAP system. So you could try to implement custom solution. Obviously, these homemade solutions have disadvantages.
Good luck,
Cheers

SSO between Portal Application and Portal Admin Tool

Hi All,
We have a requirement for implementing SSO between a Portal application and
Portal admin tool.
We are using WL Portal 8.1 SP4.
Here is the reason for this requirement -
A user logged-into Portal Application needs to login to Portal Admin tool to
do some admin activity. We want to provide a link in the portal application
using which the user can directly login to the Portal Admin tool without
having to enter the credentials again.
If someone has any info on how to implement this, can you please point me in
the right direction.
Thanks,
~Deepak

Hi,
When creating PP you have 2 options
PP used for compiling and PP used for Building
You create PP with all the libraries into Developing/Compiling Other DCs
And another PP with all the libraries into can be packaged into other build results (SDAs).
Once you have these 2 PP in place you add the DC as used DC.
And this should resolve the issue.
Hope this helps.
Cheers-
Pramod

SSO between ITS 620 R/3 and EP

Hi,
I need to use ITS 620 for R/3 4.7 and EP 6.0 for ess/mss implementation
I have to configure SSO between R/3 and EP.
Do I also need to configure SSO between ITS and R/3 , ITS and EP also for this?
If yes can any one tell me the steps in configuring SSO between ITS and R/3, ITS and EP ?
advance thanks,
PK

UPDATE:
I have installed a portal (SAp netweaver 7.0 Java stack) and have connected it to a ECC6.0 SR3 backend and I needed only to configure the SSO between portal and backend abap instance, and all worked fine. There was no need to configure the SSO between the integrated ITS and abap instance.
About the error message mentioned in my previous forum entry:
I did not only do the steps for SSO between portal and backend as described in the blog "Configuring the Business Package for Employee Self-Service (ESS)", but I also did all the additional steps as mentioned in "10 golden rules of SSO".
After that the error message "SSO logon not possible; logon tickets not activated on the server" did not appear anymore. (Instead a screen that asks for username and password always appears with the warning "No switch to HTTPS occurred, so it is not secure to send a password". But I think that's ok.)

SSO between SAP EP and JAVA app on WebSphere Application Server 5.1

Hi. I have 2 questions.
I am implementing SAP EP6 and need to display content from a WebSphere JAVA application inside the portal. The application is currently running on WAS 5.1.
1. Does anyone have any sample code or documentation regarding how to pass the SAP logon ticket to WebSphere JAVA application to accomplish SSO when inside the portal?
2. Does anyone have any sample code or documentation regarding how to pass the SAP logon ticket to WebSphere JAVA application to accomplish SSO when outside the SAP EP, but still within the same IE browser window where the SAP logon ticket exists?
Thanks for any feedback you could provide.

Hello Kevin,
please look here: https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/nw/ibm/how to set up sso between sap enterprise portal and ibm websphere portal using tai.pdf
Regarding your second questions: as long as you did not log off from SAP EP your browser hosts the SAP Logon Ticket cookie (within its timeframe of validity which is typically a couple of hours). So if you access a non SAP application that accepts SAP logon ticket with your browser, you're authenticated.
Please note that the cookie based authentication only works withing the same DNS domain. So if your SAP EP is configured to issues the SAP logon ticket to "company.com" then your browser sends it only to servers in that domain.
Regards
Michael

SSO between EP, 3rd party app, XI and R/3

Hi All,
Here is our scenario: EP--> 3rd party --> XI --> SAP R/3
User logs into EP with his userID/password...which brings him the 3rd party application (through URL iView)...lets say he search for the customer number ....3rd party (need XI userID/Password)sends request to XI (thr webservice call using sender SOAP adapter) ....then XI (need SAP userID/password) will send request to SAP (Receiver RFC adapter. How do I implement SSO for this case??
Or how do I implent SSO between 3rd party application and XI in our case.
We are sending XI user id and password in URL iView as URL parameter and Value pair. Can we send userid/pwd as variables instead hardcode values??
Thank You,
Indrasena R. Janga

Hi
my scenario is also like that
EP>XI>R//3
i am able to do the SSO between EP-->XI
But when i tried to maintaind the SSO between EP>XI>R/3 it is working from
EP>XI with logon ticket ,but the ticket that it is using from EP>XI is is not able to login to R/3 using the same ticket.
The link you have provided is not opened. can yup please tell me the steps regarding the XI-->R/3 settings.
please help me out.
Thanks & Regards
Rinku Gangwani

SSO Between SAP EP 7.0u2013 BOXIR2 SP1 u2013 BW3.5 Is SNC required?

We are trying to enable SSO between SAP EP, BO and BI so that users will be able to access Crystal reports (which have got backend as BW) from Enterprise Portal which are scheduled in BO enterprise server
Below are the details on our landscape.
1) SAP EP 7.0 Integrated with AD and SP Nego configured(if it fails users will use AD user id and pwd)
2) BO u2013 AD authentication is available as well as SAP Authentication got enabled using SAP BO Integration Kit. In BO reports are there which got backend as BW and scheduled successfully.
3) BW 3.5 is using SAP authentication(Not AD authentication)
4) SSO has been established between SAP EP and BW (user ids will be same in AD and BW)
5) BO has two servers bo1.yy.comp.com and bo2.yy.comp.com
6) SAP EP and BW has domain names as EP.xx.yy.comp.com and BW.xx.yy.comp.com u2013 additional u201Cxxu201D is there in the domain trail. So we have created a dns entry bo.xx.yy.comp.com which will resolve to bo2.yy.comp.com (CMS is running in this server) so that we meet the prerequisite for SSO with EP u2013 BO - BW.
7) BW is not configured with SNC.
Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
Even after reading many threads I couldn't understand the flow of SSO. Any advice will really help us overcome the hurdles.
Thanks in Advance
JayCeeDee

Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
>>> Assuming you are getting SSO tickets from the portal that happens automatically when the SAP authentication is configured.
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
>> You mention on the one hand SSO tickets, on the other hand Windows AD. Which one is it ? What is the authentication that the user will leverage to connect to the BusinessObjects Server ?
Ingo

Problem: Establishing SSO between EP7.0(UC) to SRM 4.0(non unicode)

Dear gurus
While creating SSO between EP 7.0 and SRM 4.0(non Unicode)....while uploading the certificate with SSO2 tool from portal....by selecting add trusted system, The system throwing error message like:
Error occurred: Selected system does not have SSO Model deployed.
is there any restrictions are there for unicode system to Non system...Actually by using my EP system i am able to connect the BI7.0 system very well, where i am getting the erro with SRM 4.0 system only
any help please
Thanks in advance

No, there are no such restrictions for SAP Logon Tickets / Assertion Tickets and Unicode vs. Non-Unicode systems.
If you are using the [NWA Trust Configuration Wizard|https://service.sap.com/sap/support/notes/1083421] then it might happen that the [ABAP backend system does not provide the required APIs|https://service.sap.com/sap/support/notes/1014077]. In that case you have to setup the SSO2 trust relationship manually (using ABAP transaction STRUSTSSO2).

SSO between ITS and EP

We are implementing ESS MSS on 4.7 , ITS 4.7 with EP 6.0
Can some one point me as to how to configure the SSO between these various landscapes. I Think we would require SSO between EP and ITS for ESS in MSS services.
regards
Sam
Message was edited by:
sameer chilama

Hi Sameer,
All the information you are looking for is in the help.sap.com
http://help.sap.com/saphelp_nw04/helpdata/en/89/6eb8e1af2f11d5993700508b6b8b11/frameset.htm
This help guide is really very clear and thorough.
Regards
Daniel

SSO between CE 7.11 and EP 7.01

Similar Messages

Maybe you are looking for