SSo between Portal 6.0 and Portal 7.0

Hi,
We want to enable single sign on between Portal 6.0 and Portal 7.0.
Our scenario is, In Portal 7.0 on click of role or workset, Portal 6.0 have to be opened in a new window without asking user ID and Password.
What are the steps, I need to follow to achieve this.
Thanks & Regards,
Bala

Hi Bala,
This [thread|Re: SSO between ep6 and ep7]should give you a kick start.
Good Luck!
Sandeep Tudumu

Similar Messages

SSO between CE 7.1 and Portal 7.0!

Hi ,
I am accessing a WebService deployed on Portal 7.0 server from an EJB deployed on CE 7.1 server.
Can anyone please provide me some documents or steps to configure SSO between CE 7.1 and Portal 7.0 if the UserIds on both the servers are the same.
Regards,
Manish

http://help.sap.com/saphelp_nwce10/helpdata/en/43/2232900bb93fece10000000a11466f/frameset.htm
P.S.: Try searching help.sap.com and/or SDN first

SSO between CE 7.11 and EP 7.01

Hi Guys,
Can someone please provide the steps for SSO between CE 7.1 EHP1 system and Netweaver 7.0 EHP1 Portal?
I am quite confused how to do this SSO setup. Done for Portal and ABAP systems earlier but never for Portal and CE as both are AS Java.
Thanks,
Shitij

Hi Shitij,
Please check the below thread might help for configuring SSO between CE 7.11 and EP 7.01.
/message/8867312#8867312 [original link is broken]
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/45/2f873d1ca96d7be10000000a114a6b/content.htm
Hope it helps
Regards
Arun

What is the difference between WebLogic Server users and Portal users

Hi All
What is the difference between users created in the WebLogic server and those
created from the webLogic Portal Admin console.
- leo

Hi Leo,
The WebLogic server console allows you to create users in the File realm (
http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html#1057106 , "Defining
Users" ).
The WebLogic Portal Admin console creates Portal users in the alternate security
realm that was written to store user/password in the Portal schema. This realm is
com.bea.p13n.security.realm.RDBMSRealm. See the javadoc for RDBMSRealm at (
http://edocs.bea.com/wlp/docs40/javadoc/wlp/com/bea/p13n/security/realm/RDBMSRealm.html
For information on alternate security realms see
http://e-docs.bea.com/wls/docs61/security/prog.html#1041025 , "Writing a Custom
Security Realm".
For information on the File realm see
http://e-docs.bea.com/wls/docs61/ConsoleHelp/security.html , "Security" and also
search the WLS 6.1 docs for "File realm" for lots of other references.
Leo wrote:
Hi All
What is the difference between users created in the WebLogic server and those
created from the webLogic Portal Admin console.
- leo--
Ture Hoefner
BEA Systems, Inc.
2590 Pearl St.
Suite 110
Boulder, CO 80302
www.bea.com

My experience of SSO between SAP Portal6.0 and non-Sap Application

Firstly I announce that I am not a Sap developer or a Sap Consultant. I am a Cognos Consultant. I need do SSO between Sap Portal and Cognos Portal in my project, So I have to make SSO between two portals.
I tested SSO between the two products on IIS5 of Windows XP and IIS6 of Windows 2003 and passed.
Step 1: Copy sapsecin.exe and sapsecu.dll on any directory where you want, such as C:PortalSecurity
Then add this directory to your Environment variable PATH. You can find the two files on sapserv<x> under general/misc/security/SAPSECU/<platform>;
Step 2: Copy your Filter ISAPI Files IIS_SSO.dll or IIS6_SSO.dll in any directory where you want, such as C:PortalFilter. You can find this two files on SAP note 442401.
Step 3: Get you verify.pse which is located in
<irj>
ootWEB-INFpluginsportalservicesusermanagementdata and put it on the same directory with your ISAPI Files ,such as C:PortalFilter
(According Sap Support articles , IIS_SSO.dll should be used on IIS 5 and IIS6_SSO should be used on IIS 6,but I can not load IIS_SSO.dll on IIS 5 of Windows XP, I use IIS6_SSO.dll );
Step 4: Create a new file named verify.properties , the content of this file see the appendix A;
Step 5: Load the IIS6_SSO.dll on your IIS. On IIS5, Select Website PropertiesISAPI FilterAdd IIS6_SSO.dll and name it wp . On IIS6,do as such and Create a Web Extensions named wp and allocate file IIS6_SSO.dll. Finally restart the www service.
I
If you can load the filter successfully, you will see the filter color is green.
On IIS6,Maybe you find that you cant load your ISAPI file IIS6_SSO.dll, Its state is unloaded and its color is red. I am confused by this question long time. I finally found you must install some R3 dll files on your system! The .dll files which I mentioned can be found in SAP note 684106, put it in a same directory with your security files, such as C:PortalSecurity and restart your web server.
(The steps above I reference Chris beck s topic)
Step 6: I write an ASP file named headerdumper.asp on my website and create a i-view to show my asp file in SAP Portal. If you succeed, you can see the http header variable<your logon name> in ASP page. If you application can receive http header variables, then Congratulations! You have apply SSO successfully.
If your log file show Can't find MYSAPSSO2 ticket cookie for URI "" on host "", dont worry about it. I am confused by this question long time though. I found the key cause the errors are cross domain or different DNS suffix.
I tested 3 scenarios :
1 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://sap-server:80/headerdumper.asp, You cant access this asp page from i-view . I am sorry that I have no idea about this.
2 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://your-server:80/headerdumper.asp, Your log will show Can't find MYSAPSSO2 ticket cookie for URI "" on host "". because they have no domain name, which is seemed that they meant different domain.
3 you must deploy your asp file and sap portal like below ,So you can apply SSO correctly:
you must access SAP Portal like : http://sap-server.domain.com:50000/irj/portal
you must access your asp file like http://yourserver.domain.com:80/headerdumper.asp
then add your asp file as i-view to your SAP Portal which URL is like above , you can get Http header variable correctly.
I am not an native English speaker, I hope you can understand what I said.
Appendix A The Content of Verfy.properties
remote_user_alias=REMOTE_USER
pse_file=C:PortalFilterverify.pse
application=portal
log_file=C:PortalFilterverfy.log
log_level=3
cache_size= 1000
Appendix B The Code of headerdumper.asp

I'd recommend to cross-post your inquiry to the Security

SSO between custom C++ application and web browser

Hello.
I have a bit of problems figuring out how to do SSO functionality between a Browser and a custom client (custom protocol over HTTP).
I want it to work as follows: If the user logs in in the HTTP client, the user is already logged in in the custom client, and vice versa.
I thought this could be implemented my reading and writing cookie values from the browser in my custom client, but it seems like the cookies set are all without expiration. IE handles these cookies private in a process, and so I can't get a hold of it.
How do I implement SSO between clients if I can't base it on cookie values?
Regards
Kyrre.

Any comment?

Setting up SSO between Sun Web Server and MS6.0

Hi,
I want to set up a trusted SSO between Sun Web server 6.1 and the MS6.0.The document does not give enough information about this.Any one done this before?
Thanks,
Ramnath

I'd recommend to cross-post your inquiry to the Security

What is the best way to SSO custom Tomcat J2EE, Sharepoint and Portal?

We are implementing EP7.0 and I believe we can use logon tickets and SAPSECULIB to integrate all our infrastructure which is Sharepoint (Runs on IIS), our custom J2EE applications (run on Apache webserver and Tomcat).
Is using of logon tickets and SAPSECULIB the recommended way to accomplish SSO or is there a better way?
Thanks in advance

Hi Victoria,
I would put the html file that you generated on the file system
let say the Apache/Apache/htdocs
Then I'd put an HTML portlet on the page and show the HTML file using an iframe
<iframe src="name of your file"
            height="600"
            width="800"
            frameborder="0"
            scrolling="no"
</iframe>Hope this helps.
Cheers
Diego

Establish SSO between OBIEE 10g/11g and SAP BW

We would like to know if there is a provision in SAP to use
Single-Sign-On mechanism between 3rd party reporting tool and SAP BW7,
where in the 3rd party tool uses XMLA connector.
The 3rd party tool that we are using is Oracle Business Intelligence
Suite Enterprise Edition Plus (OBIEE version 10.1.3.4.1) which connects
to SAP using XMLA connector.OBIEE is on Oracle Application Server (OC4J
server). We would like to now if there is single-sign-on mechanism
between OC4J and SAP.
If we use OBIEE 11g using Weblogic would we have any additional options
for single sign on with SAP BW7

Hi,
ABAP stack should support SAML in newer version (maybe 7.02). Anyway, SSO cookie has a simple structure and it's signed by private key. The receiving system just verifies signature using public key.I've seen somewhere on net that somebody uses proxy to authenticate user, generate SSO ticket and redirect user to SAP system. So you could try to implement custom solution. Obviously, these homemade solutions have disadvantages.
Good luck,
Cheers

Reg: SSO Creation between business objects to enterprice portal

Dear Experts,
Could you please send me some screen shots of creating SSO between business objects to enterprice portal.
Thanks& Regards,
KishoreJak

There is a very detailed blog series on the topic of integrating SAP Business Objects and Enterprise portal.
The SSO aspects are also covered there:
/people/ingo.hilgefort/blog/2010/03/29/sap-businessobjects-enterprise-sap-enterprise-portal--part-1-of-4
Let me know if you have any specific questions after going through it.
Thanks,
Shanti

Secure Communication between SAP R/3 and SAP portal(WAS Java)

Hi All,
We have a requirement where client says ,there needs to be a SSL tunnel established between SAP R/3 and Portal(through ITS) to access R/3 through portal
Do we have to use SSL for that or SNC?I heard SNC is a mechanism which have to be used here since it uses DIAG protocol to connect but not Http.Is it true?Kindly give some more ideas on this.
Other thing is to do this they need to open a port between for using Firewall.Can you guide which SAP port has to be open for this connection?
Thanks In Advance
Regards
Rani A

Hi Rani,
what the ITS Admin is, is explained in the docs to the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/28611e0bd26493e10000000a1553f7/frameset.htm">ITS Admin Tool</a>. This also includes how to access it.
Usually specifiying the ABAP backend is done by maintaining the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2b67fe369b060ae10000000a155369/frameset.htm">Global Service File Parameters</a>.
The <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2aa8081a3a060ae10000000a155369/frameset.htm">SNC configuration</a> is part of the <a href="http://help.sap.com/saphelp_nw04/helpdata/en/44/2a95a61a3a060ae10000000a155369/frameset.htm">Security Configuration</a> and also done in the ADM instance of the ITS.
Regards,
Patrick

SSO between ITS 620 R/3 and EP

Hi,
I need to use ITS 620 for R/3 4.7 and EP 6.0 for ess/mss implementation
I have to configure SSO between R/3 and EP.
Do I also need to configure SSO between ITS and R/3 , ITS and EP also for this?
If yes can any one tell me the steps in configuring SSO between ITS and R/3, ITS and EP ?
advance thanks,
PK

UPDATE:
I have installed a portal (SAp netweaver 7.0 Java stack) and have connected it to a ECC6.0 SR3 backend and I needed only to configure the SSO between portal and backend abap instance, and all worked fine. There was no need to configure the SSO between the integrated ITS and abap instance.
About the error message mentioned in my previous forum entry:
I did not only do the steps for SSO between portal and backend as described in the blog "Configuring the Business Package for Employee Self-Service (ESS)", but I also did all the additional steps as mentioned in "10 golden rules of SSO".
After that the error message "SSO logon not possible; logon tickets not activated on the server" did not appear anymore. (Instead a screen that asks for username and password always appears with the warning "No switch to HTTPS occurred, so it is not secure to send a password". But I think that's ok.)

Question about SSO (for Java Dialog instance) for Portal EP 6.0 SP 20

Hi All
I have following question.
We are running Portal 6.0 SP 20. We have JAVA (Portal) CI+DB running on single host SAPQP1 and Two JAVA Dialog Instances (J2EE Application servers) running on separate host namely SAPAP35 and SAPAP36.
I was able to configure SSO between SAPQP1 (CI+DB) and ECC R/3 system (QC1). SSO is working fine. Users can access all ESS/MSS data in portal when they use Portal URL running on SAPQP1 (http://sapqp1.xxxxx.com:50000/irj).
But when users try to access ESS/MSS data via portal (URL) running on SAPQP35 (http://sapap35.xxxxx.com:50000/irj) and SAPAP36 ((http://sapap36.xxxxx.com:50000/irj) SSO does not work, i.e it system asks user id and password.
So , how I can configure SSO between SAPAP35 and SAPAP36 JAVA Dialog instances and ECC R/3?

Hi Sandip,
obviously you already configured QC1 to accept Tickets issued by the Java Engine on SAPQP1. Did you imported the public (java) certificates from SAPAP35 and SAPAP36 into your ECC System? The certicficates need to be added in client 000 to your System PSE and in your production client to your ACL.
Regards,
Enno

SSO between EP, 3rd party app, XI and R/3

Hi All,
Here is our scenario: EP--> 3rd party --> XI --> SAP R/3
User logs into EP with his userID/password...which brings him the 3rd party application (through URL iView)...lets say he search for the customer number ....3rd party (need XI userID/Password)sends request to XI (thr webservice call using sender SOAP adapter) ....then XI (need SAP userID/password) will send request to SAP (Receiver RFC adapter. How do I implement SSO for this case??
Or how do I implent SSO between 3rd party application and XI in our case.
We are sending XI user id and password in URL iView as URL parameter and Value pair. Can we send userid/pwd as variables instead hardcode values??
Thank You,
Indrasena R. Janga

Hi
my scenario is also like that
EP>XI>R//3
i am able to do the SSO between EP-->XI
But when i tried to maintaind the SSO between EP>XI>R/3 it is working from
EP>XI with logon ticket ,but the ticket that it is using from EP>XI is is not able to login to R/3 using the same ticket.
The link you have provided is not opened. can yup please tell me the steps regarding the XI-->R/3 settings.
please help me out.
Thanks & Regards
Rinku Gangwani

SSO Between SAP EP 7.0u2013 BOXIR2 SP1 u2013 BW3.5 Is SNC required?

We are trying to enable SSO between SAP EP, BO and BI so that users will be able to access Crystal reports (which have got backend as BW) from Enterprise Portal which are scheduled in BO enterprise server
Below are the details on our landscape.
1) SAP EP 7.0 Integrated with AD and SP Nego configured(if it fails users will use AD user id and pwd)
2) BO u2013 AD authentication is available as well as SAP Authentication got enabled using SAP BO Integration Kit. In BO reports are there which got backend as BW and scheduled successfully.
3) BW 3.5 is using SAP authentication(Not AD authentication)
4) SSO has been established between SAP EP and BW (user ids will be same in AD and BW)
5) BO has two servers bo1.yy.comp.com and bo2.yy.comp.com
6) SAP EP and BW has domain names as EP.xx.yy.comp.com and BW.xx.yy.comp.com u2013 additional u201Cxxu201D is there in the domain trail. So we have created a dns entry bo.xx.yy.comp.com which will resolve to bo2.yy.comp.com (CMS is running in this server) so that we meet the prerequisite for SSO with EP u2013 BO - BW.
7) BW is not configured with SNC.
Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
Even after reading many threads I couldn't understand the flow of SSO. Any advice will really help us overcome the hurdles.
Thanks in Advance
JayCeeDee

Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
>>> Assuming you are getting SSO tickets from the portal that happens automatically when the SAP authentication is configured.
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
>> You mention on the one hand SSO tickets, on the other hand Windows AD. Which one is it ? What is the authentication that the user will leverage to connect to the BusinessObjects Server ?
Ingo

SSo between Portal 6.0 and Portal 7.0

Similar Messages

Maybe you are looking for