SSO between SAP Portal 7.3 and Ruby on Rails

Hello Everyone,
We are planning to integrate SAP Portal 7.3 and a RoR application and I am wondering If someone can share some experience (If you have any of course) on how to establish SSO between SAP Portal and RoR.
The SAP Portal will act as service provided and RoR as a consumer, we don't have LDAP, so the Portal UME is in ABAP and RoR uses an own UME database. We have SSO between our Portal and SAP Backend systems.
In RoR customers will have access to their own information (Invoices, etc..) that will be provided by the backend system.
URL transaction and iFrames is not an option for us.
The second option is to call Web Services, directly or through the SAP Portal (we are using a central sr).
I am a NetWeaver consultant who heard about RoR but have no experience in this field.
All help and tips are greatly appreciated!.
Regards,
Ridouan

We used Client certificates. Still working on the PoC.

Similar Messages

My experience of SSO between SAP Portal6.0 and non-Sap Application

Firstly I announce that I am not a Sap developer or a Sap Consultant. I am a Cognos Consultant. I need do SSO between Sap Portal and Cognos Portal in my project, So I have to make SSO between two portals.
I tested SSO between the two products on IIS5 of Windows XP and IIS6 of Windows 2003 and passed.
Step 1: Copy sapsecin.exe and sapsecu.dll on any directory where you want, such as C:PortalSecurity
Then add this directory to your Environment variable PATH. You can find the two files on sapserv<x> under general/misc/security/SAPSECU/<platform>;
Step 2: Copy your Filter ISAPI Files IIS_SSO.dll or IIS6_SSO.dll in any directory where you want, such as C:PortalFilter. You can find this two files on SAP note 442401.
Step 3: Get you verify.pse which is located in
<irj>
ootWEB-INFpluginsportalservicesusermanagementdata and put it on the same directory with your ISAPI Files ,such as C:PortalFilter
(According Sap Support articles , IIS_SSO.dll should be used on IIS 5 and IIS6_SSO should be used on IIS 6,but I can not load IIS_SSO.dll on IIS 5 of Windows XP, I use IIS6_SSO.dll );
Step 4: Create a new file named verify.properties , the content of this file see the appendix A;
Step 5: Load the IIS6_SSO.dll on your IIS. On IIS5, Select Website PropertiesISAPI FilterAdd IIS6_SSO.dll and name it wp . On IIS6,do as such and Create a Web Extensions named wp and allocate file IIS6_SSO.dll. Finally restart the www service.
I
If you can load the filter successfully, you will see the filter color is green.
On IIS6,Maybe you find that you cant load your ISAPI file IIS6_SSO.dll, Its state is unloaded and its color is red. I am confused by this question long time. I finally found you must install some R3 dll files on your system! The .dll files which I mentioned can be found in SAP note 684106, put it in a same directory with your security files, such as C:PortalSecurity and restart your web server.
(The steps above I reference Chris beck s topic)
Step 6: I write an ASP file named headerdumper.asp on my website and create a i-view to show my asp file in SAP Portal. If you succeed, you can see the http header variable<your logon name> in ASP page. If you application can receive http header variables, then Congratulations! You have apply SSO successfully.
If your log file show Can't find MYSAPSSO2 ticket cookie for URI "" on host "", dont worry about it. I am confused by this question long time though. I found the key cause the errors are cross domain or different DNS suffix.
I tested 3 scenarios :
1 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://sap-server:80/headerdumper.asp, You cant access this asp page from i-view . I am sorry that I have no idea about this.
2 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://your-server:80/headerdumper.asp, Your log will show Can't find MYSAPSSO2 ticket cookie for URI "" on host "". because they have no domain name, which is seemed that they meant different domain.
3 you must deploy your asp file and sap portal like below ,So you can apply SSO correctly:
you must access SAP Portal like : http://sap-server.domain.com:50000/irj/portal
you must access your asp file like http://yourserver.domain.com:80/headerdumper.asp
then add your asp file as i-view to your SAP Portal which URL is like above , you can get Http header variable correctly.
I am not an native English speaker, I hope you can understand what I said.
Appendix A The Content of Verfy.properties
remote_user_alias=REMOTE_USER
pse_file=C:PortalFilterverify.pse
application=portal
log_file=C:PortalFilterverfy.log
log_level=3
cache_size= 1000
Appendix B The Code of headerdumper.asp

I'd recommend to cross-post your inquiry to the Security

SSO between SAP EP and JAVA app on WebSphere Application Server 5.1

Hi. I have 2 questions.
I am implementing SAP EP6 and need to display content from a WebSphere JAVA application inside the portal. The application is currently running on WAS 5.1.
1. Does anyone have any sample code or documentation regarding how to pass the SAP logon ticket to WebSphere JAVA application to accomplish SSO when inside the portal?
2. Does anyone have any sample code or documentation regarding how to pass the SAP logon ticket to WebSphere JAVA application to accomplish SSO when outside the SAP EP, but still within the same IE browser window where the SAP logon ticket exists?
Thanks for any feedback you could provide.

Hello Kevin,
please look here: https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/nw/ibm/how to set up sso between sap enterprise portal and ibm websphere portal using tai.pdf
Regarding your second questions: as long as you did not log off from SAP EP your browser hosts the SAP Logon Ticket cookie (within its timeframe of validity which is typically a couple of hours). So if you access a non SAP application that accepts SAP logon ticket with your browser, you're authenticated.
Please note that the cookie based authentication only works withing the same DNS domain. So if your SAP EP is configured to issues the SAP logon ticket to "company.com" then your browser sends it only to servers in that domain.
Regards
Michael

SSO Between SAP EP 7.0u2013 BOXIR2 SP1 u2013 BW3.5 Is SNC required?

We are trying to enable SSO between SAP EP, BO and BI so that users will be able to access Crystal reports (which have got backend as BW) from Enterprise Portal which are scheduled in BO enterprise server
Below are the details on our landscape.
1) SAP EP 7.0 Integrated with AD and SP Nego configured(if it fails users will use AD user id and pwd)
2) BO u2013 AD authentication is available as well as SAP Authentication got enabled using SAP BO Integration Kit. In BO reports are there which got backend as BW and scheduled successfully.
3) BW 3.5 is using SAP authentication(Not AD authentication)
4) SSO has been established between SAP EP and BW (user ids will be same in AD and BW)
5) BO has two servers bo1.yy.comp.com and bo2.yy.comp.com
6) SAP EP and BW has domain names as EP.xx.yy.comp.com and BW.xx.yy.comp.com u2013 additional u201Cxxu201D is there in the domain trail. So we have created a dns entry bo.xx.yy.comp.com which will resolve to bo2.yy.comp.com (CMS is running in this server) so that we meet the prerequisite for SSO with EP u2013 BO - BW.
7) BW is not configured with SNC.
Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
Even after reading many threads I couldn't understand the flow of SSO. Any advice will really help us overcome the hurdles.
Thanks in Advance
JayCeeDee

Question 1- As per point 3 u2013 SAP Authentication is available in BO u2013
So in that BO server can we use ASPX page to read MYSAPSSO2 cookie generated by SAP EP and use that cookie to access report which got BW as backend?
>>> Assuming you are getting SSO tickets from the portal that happens automatically when the SAP authentication is configured.
Question 2
Do we need any more configuration for the SSO from EP - BO u2013 BW? (do we need to go for SNC?)
>> You mention on the one hand SSO tickets, on the other hand Windows AD. Which one is it ? What is the authentication that the user will leverage to connect to the BusinessObjects Server ?
Ingo

SSO between BI,CE7.1 ENH1 and BOE 3.1

Hi All,
Our requirement is to do SSO between BI,CE7.1 ENH1 and BOE 3.1. In the BO Integration Kit documentation, it has mentioned trusting the systems between BI and BO and SSO configuration between EP and BO.
I have performed all the steps given in the document even in CE Portal and SSO between CE and BO is not working. In further research, I can find in NWA, the JAVA EE Application u201Ccom.businessobjects.pct.masteriview.paru201D is in explicit stop mode and it is not starting even I try to do manually or restarting the server. Below is the log which states the following for not starting the service
[ERROR CODE DPL.DS.5035] Application [sap.com/com.businessobjects.pct.masteriview] cannot be started. Reason: it has hard reference to resource [jcoclient] with type [SAPPORTAL], which is not active on the server. Hint: 1) Is referred resource deployed? 2) Is referred resource able to start?
Not sure which resource it is looking for and need expertise on the same..Earliest response is highly appreciated.
Thanks,
PradeeP

HI,
please make sure you check the supported SAP J2EE versions for BusinessObjects here : http://service.sap.com/bosap-support and also remember that the integration is for the portal and you are using CE.
ingo

How to set up SSO between e-portal employee node & ebill customer node?

We have a requirement to set up SSO between e-portal employee node & ebill customer node.
I am told that sso is possible only between 2 employee nodes.
Please advise.

Not sure I understand which part is failing.
Is it the C program calling your packaged function? Or does the error occur in the PL/SQL code, in which case you should be able to pinpoint where it's wrong?
A few comments :
1) Using DOM to build XML out of relational data? What for? Use SQL/XML functions.
2) Giving sample data is usually great, but it's not useful here since we can't run your code. We're missing the base tables.
3) This is wrong :
vStrSqlQuery := 'SELECT * FROM ' || vTblName                     || ' WHERE record_update_tms <= TO_DATE(''' || TO_CHAR(vLastPubTms, 'MM/DD/YYYY HH24:MI:SS') || ''', ''MM/DD/YYYY HH24:MI:SS'') ' ;
A bind variable should be used here for the date.
4) This is wrong :
elmt_value := xmldom.createTextNode (doc, l_clob(1));
createTextNode does not support CLOB so it will fail as soon as the CLOB you're trying to pass exceeds 32k.
Maybe that's the problem you're referring to?
5) This is most wrong :
     l_clob(1):=REPLACE(l_clob(1),'<?xml version="1.0"?>', NULL);
     l_clob(1):=REPLACE(l_clob(1),'<', '<');
     l_clob(1):=REPLACE(l_clob(1),'>', '>');
I understand what you're trying to do but it's not the correct way.
You're trying to convert a text() node representing XML in escaped form back to XML content.
The problem is that there are other things to take care of besides just '<' and '>'.
If you want to insert an XML node into an existing document, treat that as an XML node, not as a string.
Anyway,
Anyone that can help me to find out the required magic number
That would be a bad idea. Fix what needs to be fixed.
And please clearly state which part is failing : the C program or the PL/SQL code?
I'd vote for PL/SQL, as pointed out in [4].

Difference between abstract portal component ,dynpages and jsp dynpage

Hi All,
I am new to the SAP world.Can you help me out in finding the difference between abstract portal component ,dynpages and jsp dynpage in Portal development.Please send me any information.

Hi,
Welcome to SDN Community
This blog will brief you the differences between them,
Java development methodologies (Part II)
Regards
Srinivasan T

Difference between SAP Learning Solution & Training and Event Manag

Hi All,
Can anyone tell me the Difference between SAP Learning Solution & Training and Event Manag.
Which approach would be recommended for the Training and Event Management implementation..
Pls let me know the pro's and con's of both the approaches.
Regards
Vijay

Hi Vijay,
Training and Event Management (now called <b>Training Management (TEM)</b>, sometimes referred to as PE in SAP documentation). Employees/Learners were able to book courses and view their training history via Employee Self-Service, and supported the full suite of classroom training administration functions.
SAPs current learning software is SAPs Learning Solution (LSO). Companies still can use TEM to administer classroom-only training or they can choose to leverage LSO functionality to deliver classroom training as well as Web-based training, virtual classrooms, blended learning, and collaboration to their employees.
Training Management (TEM) serves as the foundation of SAPs Learning Solution (LSO). However, LSO includes much new functionality such as administering and delivering Web-based training, virtual classrooms, curricula, and online tests. The entire LSO consists of SAP Authoring Environment, Content Management System (CMS), Learning Management System (LMS), Learning Portal, Content Player, Offline Player, Business Intelligence (BI), and the Collaboration functionality.
Regards,
Dev

Difference between SAP BW 3.5 and SAP BI 7.0

Hi all,
actually, i work on SAP BW 3.5, now for new project need knowledge of
SAP BI 7.0
pls, help regarding the differences between SAP BW 3.5 and
SAP BI 7.0
it is little urgent.
tks in advance
- BW Professional

1. In Infosets now you can include Infocubes as well.
2. The Remodeling transaction helps you add new key figure and characteristics and handles historical data as well without much hassle. This is only for info cube.
3. The BI accelerator (for now only for infocubes) helps in reducing query run time by almost a factor of 10 - 100. This BI accl is a separate box and would cost more. Vendors for these would be HP or IBM.
4. The monitoring has been imprvoed with a new portal based cockpit. Which means you would need to have an EP guy in ur project for implementing the portal !
5. Search functionality hass improved!! You can search any object. Not like 3.5
6. Transformations are in and routines are passe! Yess, you can always revert to the old transactions too

What is the difference between SAP NW PI7.1 and PI7.1 EHP1

We have a customer using SAP PI7.1 EHP1. The application to be deployed
isdeveloped on SAP Netweaver PI 7.1 SP06.
We need to know if application developed and transported from PI7.1 is
compatible with EHP1?
Below are the Components used by the application .
1) SSL communication using SOAP adapter
2) Java mapping , Graphical mapping , XSLT mapping
3) Customised EJB modules
4) Adapter framework
5) ALE layer for IDoc communication from ERP to PI
6) RFC lookups to PI system and ERP system.
Questions
1)Will PI EHP1 be able to communicate with PI7.1 using SOAP adapter ?
2) What is the difference between SAP NW PI7.1 and PI7.1 EHP1 ?
Regards,
Sneha

Hi,
EHP Pi7.1 new
IPv6 Support in SAP Systems (new)
Async/Sync and Sync/Async Bridge in the JMS Adapter (New)
High Availability (New) Locate the document in its SAP Library structure
Use
A new concept is available for setting up a high availability environment for SAP NetWeaver Process Integration (PI). To do this, you need SAP Web Dispatcher for load balancing, and you must reconfigure your HTTP, RFC, and RMI connections so that they can be used for load balancing. You must also make various configuration steps in other components of your PI environment.
[Level 4: Document: XML to Text Conversion Module (New)] XML to Text Conversion Module (New)
Message Packaging (New)
Monitoring Milestones (New) Locate the document in its SAP Library structure
Use
You can use the new scenario variant Monitoring Milestones of the Business Process Management scenario to define a monitoring process that can monitor events from different applications. A monitoring process can subscribe to events from SAP or non-SAP systems.
check given Link
http://help.sap.com/saphelp_nwpi711/helpdata/en/61/8c3842bb58f83ae10000000a1550b0/frameset.htm
Regards,
Amit

Using the Open Catalog Interface (OCI) between SAP-ECC 6.0 and SAP-MDM

Hello ASUG Community.
I'm working on an SAP-MDM project where we will configure the OCI interface between SAP-ECC 6.0 and SAP-MDM. The business requirement will be to punch out to SAP-MDM's catalog from SAP-ECC for expensed items (e.g., no material master record exists in SAP-ECC).
The data that will be returned to SAP-ECC will be purchase price info, material group, short text, & our global SAP-MDM item number.
The question I've been trying to design around is "where to store the SAP-MDM item number"?
I've looked into creating a custom filed on EKPO but now feel that a configured text field will be the best solution from an SAP-ECC point of view (less effort on the SAP-ECC side from a development perspective, no need to regenerate the EKPO table, etc.).
The question I'd like to pose to ASUG is.... Does anyone have experience or an opinion to offer using this functionality? It seems that I will have to code in a user exit or BAdi to insure that the SAP-MDM item numbers are returned to the appropriate text field on my POu2019s. Or can this be done using the standard OCI functionality?
I found OSS note 1347656 which references BADI "ME_CATALOG_INTERFACE" but I'm not sure if this right path to go down or if this would be the correct place to code non-conforming OCI mapping requiremetns.
Any insight would be most appreciated.
Thanks. Sincerely,
Rich Wortmann

I would suggest you create a new field for this as you may require thois going forward for reporting as well. Text fields are difficult to report.
Sorry not sure about the BADI to use.

Difference Between SAP ECC 6.0 and SAP Solution

Dear Experts,
   We are in the process of implementing a new SAP Structure.
    We are taking a hosted model from vendor which is called SBH (Subscription Based Hosting) of SAP Solution
So my question to all experts is that, what is the exact difference between SAP ECC 6.0 and SAP Solution SBH model.
   If any comparison chart, it would be helfull.
Do reply asap.
Thanks in advance,
Nilesh Jain

Hi Nilesh,
Looking at the image below, you will find out that ECC6 is under SAP ERP, and SAP ERP is under SAP Solution:
SAP solution is of a bigger element and ECC 6 is a component of it.
Regards,
Rod

Differences between the Portal Data Collector and the Activity Data Collect

Hello,
I want to know what are the differences between the Portal Data Collector and the Activity Data Collector?
Best Regards.
Pablo Mortera.

All of my SQL Server instances are sql server 2008r2 standard edition(10.50.2500). MDW is existing database, I try to setup collection sets for multiple instances and store data in one central MDW database
I create MDW in one instance, then run run configure Management Data Warehouse in target intance. collection sets were created successfully, but job failed with following error:
Executed as user: COCAD\INTDEPT01SQLAgentC10. The Management Data Warehouse version "00.00.0000.00" is not supported by the current data collector. Please upgrade the Management Data Warehouse by running the Management Data Warehouse Configuration
Wizard. Process Exit Code 5. The step failed.
Thanks
PAULqaz

Difference between sap xi 3.0 and sap pi 7.0

hi guys,
what is the difference between SAP XI 3.0 and SAP PI 7.0,and R/3 4.7 and ECC 6.0
regards,
subba reddy

Hi Subba reddy,
Check this link for PI differencess
https://wiki.sdn.sap.com/wiki/display/XI/PI%207.1%20Components%20and%20its%20features%20over%20XI%202.0,XI%203.0,PI%207.0
Regards
Ramesh

What is the major differences between SAP CRM 4.0 and SAP CRM 5.0?

Dear all,
Please let me know the major differences between CRM 4.0 and CRM 5.0 versions?
Your suggestions will be highly appreciated.
Thank you
Raghu ram

Hi Raghu,
In order to find out the differences between SAP CRM 4.0 and SAP CRM 5.0, you will find no better documentation than the release notes availalble at the following link:
[https://websmp204.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000429833&_SCENARIO=01100035870000000202&]
There are several functional improvements, and lot of new functionalites and also better integaration points with SAP ECC. Some of the new features like Visit Planning, Warrenty Claims, Enhanced and easy configurable/ customizable IC Webclient, New concept of Marketing Organization in Org Model. For further information, go through the release notes.
regards
Srikantan

SSO between SAP Portal 7.3 and Ruby on Rails

Similar Messages

Maybe you are looking for