SSO Configuration in BO Platform(CMC) & SAP BW 7.0
HI All,
We are using SAP BO Platform 4.0 SP01 and SAP BW 7.1 and developed few BO WEBI reports on BEX Queries . I want to configure SSO (SINGLE SIGN ON) to enable analysis authorizations of BW. I did all the following steps, but getting OLAP Error when we try to execute query without BO Administrator role.
we configured analysis authorizations in SAP BW and tested. its working fine.
we uploaded key store file into CMC and certificate into SAP BW.
we enabled single sign on at BEX connector in CMC.
Imported roles , users into BO From BW and assigned BO roles like EVERYONE and folder access related roles.
we did settings in BILAUNCHPAD txt file in WEB-INF, CUSTOM folder.
The same settings are done in SAP BO 4.0 SP06 and SSO is working fine and getting the data as per the security given in BW.
Please suggest me if I am missing anything.
Thanks,
Joseph
Hi Mayank,
Unfortunately i cant attach screen shot. Without SSO selection in authentication i am getting output. But when i select SSO in authentication .I am getting below error.
"Cannot connect to OLAP Source (Error:INF).
Regards,
Joseph
Similar Messages
-
SAP Best Practices for SSO Configuration
Hello There,
Are there any SAP Best Practices available for SSO Configuration. If so, Kindly help me with those..
And also any Third party tools available in the market for SSO Configuration..
Appriciate your Help on this.. Thanks in advance.
Regards,
Pranay S
Edited by: Pranay Subedari on Apr 29, 2011 9:12 AMHello,
Types on the SSO are classified with the systems involved in configuration (i.e.) SSO between ABAP Stack and Java stack or LDAP, OS
Refer the link for more details [Document Deleted]
Regards,
Anand
Message was edited by: Jason Lax -
SAP CRM to ECC - SSO Configuration - Logon Language Setup
Hi All,
I am a BASIS consultant currently handling one CRM project. I need a help in configuring SSO between CRM and ECC. Now SSO is not configured, so When I click on the External Link created in CRM calling an ECC transaction, it requests for Client/UserID/Password/LogonLang for the ECC system. Here it takes Logon Language as same as what I have logged in CRM. Hope once SSO configured it will check only for the userID and log into ECC without requesting any further details. But the issue here is we are planning to have additional languages in CRM but not in ECC. So whenenver user logs in CRM with language other than EN - english (eg. FR), and when tried to login to ECC with the external link from CRM, by default ECC login needs to be logged in with language EN, as FR will not be available in ECC. I do not find any logon language configuration in SSO, how can we achieve this, logging into language FR in CRM, logging in EN when clicking External ECC link? Configuring Logon Data defaults (in SU01) in ECC, restricting to logon language EN, will not help I hope. Please advise.
Thanks in advance.
Regards,
ShahulHi Srikishan,
Thanks for the response. When user from CRM logged in another language than EN for eg. FR, clicks on external link in CRM, takes to EN, only if that language FR is not installed in ECC, else it will take to the same language in which CRM user logged in. This cannot be controlled in SSO configuration. Is this correct?
In case if FR is installed in both the systems, ie CRM and ECC, but user wants to log only to EN when clicked the external link(to ECC) from CRM, how we can configure this, Is any parameter can control or SSO setup configuration available? Please advice.
Regards,
Shahul Hameed -
Know more detail about the Remote Support Platform for SAP Business One ?
SAP Business One 9.1 is about to release this year and we can see in the feature enhancements that a significant update is planned in the Remote Support Platform for SAP Business One, more commonly known as RSP. Let’s have a quick look what update is planned for RSP in version 9.1:
Enhancements planned in Remote Support Platform for SAP Business One 9.1
RSP is planned to support both SAP Business One on Microsoft SQL Server as well as SAP Business One on HANA Database
RSP Processes and Reports adapted to SAP HANA Database
With this plan RSP will help in the areas of Download, Installation, Go-Live Check, Monitoring, Upgrade and Support for SAP Business One both on SQL Server and HANA.
But like me (non-SAP B1 Consultant) many of you have the question what is RSP and how it helps in support? Here I have tried to gather all information.
What is Remote Support Platform for SAP Business One?
The remote support platform for SAP Business One is designed to protect a SAP Business One installation by providing automated and remote support in a high-volume business.
The platform monitors the entire SAP Business One environment. By significantly reducing the time between the appearance, identification, and resolution of issues, the remote support platform for SAP Business One minimizes the impact on customer databases and processes.
Some Key Features of Remote Support Platform:
Showing alerts to SAP B1 Admin about the events which require their attention, such as low disk space, database backups, etc.
Incident Reports against the issues identified which require attention of SAP Support
Company Database Backup and Restore options
Regular fixes of Company Database inconsistencies
Check, Download and Install regular updates in SAP Business One
Upload Logs and required files to SAP Support or to Partner Support on regular basis
Some details about RSP Backup Management
Schedule daily, weekly, and monthly backups
Perform differential and full database backups
Back up transaction logs
Back up files to shared folders on a network
System Status Report through RSP
From June 1st 2013, it will be mandatory to install, configure and upload the System Status Report (SSR) from Remote Support Platform (RSP) for SAP Business One in order to receive support for messages of a technical nature (upgrades, performance & crashes, etc).
Database uploads only via RSP
From June 1st 2013 SAP Business One Support will only accept database uploads to SAP via remote support platform for SAP Business One. In certain exceptional circumstances STFP may be used but this will constitute a minority of cases.
Microsoft Windows PowerShell Scripting
In the remote support platform studio, you can create tasks using Microsoft Windows PowerShell scripting. PowerShell enables you to perform remote administrative tasks on customers’ Microsoft Windows operating systems, by providing full access to Component Object Model (COM) and Windows Management Instrumentation (WMI).Some Network Prerequisite for RSP
To achieve the internet connection test, you must allow port 80 for the RSP external communication
Disabling antivirus firewall or add the RSP to the trusted zone of the antivirus
Set the correct proxy
Disabling Windows firewall in the TP_link Wireless Configuration Utility
Want to now More about It Click Here : Remote Support Platform for SAP Business OneSAP Business One 9.1 is about to release this year and we can see in the feature enhancements that a significant update is planned in the Remote Support Platform for SAP Business One, more commonly known as RSP. Let’s have a quick look what update is planned for RSP in version 9.1:
Enhancements planned in Remote Support Platform for SAP Business One 9.1
RSP is planned to support both SAP Business One on Microsoft SQL Server as well as SAP Business One on HANA Database
RSP Processes and Reports adapted to SAP HANA Database
With this plan RSP will help in the areas of Download, Installation, Go-Live Check, Monitoring, Upgrade and Support for SAP Business One both on SQL Server and HANA.
But like me (non-SAP B1 Consultant) many of you have the question what is RSP and how it helps in support? Here I have tried to gather all information.
What is Remote Support Platform for SAP Business One?
The remote support platform for SAP Business One is designed to protect a SAP Business One installation by providing automated and remote support in a high-volume business.
The platform monitors the entire SAP Business One environment. By significantly reducing the time between the appearance, identification, and resolution of issues, the remote support platform for SAP Business One minimizes the impact on customer databases and processes.
Some Key Features of Remote Support Platform:
Showing alerts to SAP B1 Admin about the events which require their attention, such as low disk space, database backups, etc.
Incident Reports against the issues identified which require attention of SAP Support
Company Database Backup and Restore options
Regular fixes of Company Database inconsistencies
Check, Download and Install regular updates in SAP Business One
Upload Logs and required files to SAP Support or to Partner Support on regular basis
Some details about RSP Backup Management
Schedule daily, weekly, and monthly backups
Perform differential and full database backups
Back up transaction logs
Back up files to shared folders on a network
System Status Report through RSP
From June 1st 2013, it will be mandatory to install, configure and upload the System Status Report (SSR) from Remote Support Platform (RSP) for SAP Business One in order to receive support for messages of a technical nature (upgrades, performance & crashes, etc).
Database uploads only via RSP
From June 1st 2013 SAP Business One Support will only accept database uploads to SAP via remote support platform for SAP Business One. In certain exceptional circumstances STFP may be used but this will constitute a minority of cases.
Microsoft Windows PowerShell Scripting
In the remote support platform studio, you can create tasks using Microsoft Windows PowerShell scripting. PowerShell enables you to perform remote administrative tasks on customers’ Microsoft Windows operating systems, by providing full access to Component Object Model (COM) and Windows Management Instrumentation (WMI).Some Network Prerequisite for RSP
To achieve the internet connection test, you must allow port 80 for the RSP external communication
Disabling antivirus firewall or add the RSP to the trusted zone of the antivirus
Set the correct proxy
Disabling Windows firewall in the TP_link Wireless Configuration Utility
Want to now More about It Click Here : Remote Support Platform for SAP Business One -
SSO Configuration in UNIX Environment
Hi,
We are planning to impliment SSO between 2004s Portal with R/3, BW, and host of other non SAP application which supports SSO. All the applications are hosted in UNIX environment.
Could anyone help us in understanding the pros and cons of having SSO in unix envrionment. Also you could give us any document (other than help.sap.com) which guides us in configuring will be of great help.
Thanks
Vivek Raj.Hi,
There are no pros and cons for <b>SSO on Unix</b>. Needless to mention, the pros and cons of different operating systems supported by SAP.
The steps involved to configure SSO remains the same for any of the SAP backend systems:
1) Create a system on Portal and give a system alias to it.
2) Download the verify.der file from Portal (System Administration -> System Configuration -> Keystore Administration)
3) Log on to the backend SAP system.
4) Use transaction STRUSTSSO2 and import the Portal certifcate (verify.der) to the SAP R3 or SAP BW or SAP CRM or for that matter any SAP system with ABAP stack.
5) Give the values for EP system ID, client and language. Refer to this link : http://help.sap.com/saphelp_nw2004s/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm
6) Configure the backend SAP systems to accept and verify the logon ticket. Use RZ10 and set the parameters : login/accept_sso2_ticket=1 and login/create_sso2_ticket=1
7) Restart your R3 or BW system.
For non-SAP systems, can you just let me know which systems are you referring to ?
Incase you need a document for SSO configuration, do send me your email address. You can also find documents in SDN Library.
Regards,
Sunil -
SSO configuration in BOBJ 4 with Active Directory
Hi Experts,
Our client wants to implement the BOBJ on AIX 7.1 box with oracle 11G and wants to configure the Active Directory authentication for the BOBJ.
BI 7.0 is already implemented on AIX. I have searched a lot to find the relevant document for the same but unable to do but I found the doc for BOBJ on windows with AD but not sure if the method is similar for the AIX box, Could you please help me to find out the required doc and explain me what should be our approach to configure the same
Also , Is it possible that if we configure the AD authentication for SAP BI and then used the SAP authentication in BOBJ side with importing the SAP role and BOBJ transports in SAP. Will BOBJ work for the user created in BI ?
Kindly suggest.
Regards
Saurabh mishraThanks Tim,
Actually I haven't worked on the AD and LDAP side so can you please elaborate your sentence and can you also assist me with the guide required for this configuration or any other example document. I read the article on below link -
http://sboblog.infotrust.dk/index.php/2010/05/21/active-directory-sso-on-sap-businessobjects-xi-3-1/
but I believe that this will not applicable for me as we have BOBJ box on AIX.
Regards
Saurabh Mishra -
SSO Configuration in the Portal - Configtool screen greyed out
Hi,
I am trying to setup SSO to our AD server in our portal system.
However, when I go into the config tool to change the settings in the UME LDAP Tab - the screen is greyed out and I cannot change anything.
Anyone know how I can modify this screen?
DaveHi ,
You can opt for SAML.
Configuration from BASIS & Portal Side.
[Setup SAML 1.1-based Web SSO from NetWeaver CE to non-SAP systems ]
Configuration from Share Point side.
[http://technet.microsoft.com/en-us/library/ff607753.aspx]
Also you can check out the third party tool u201C btexx MOSS Integratoru201D .
[http://www.btexx.com/products/btexx-collaborationmanager/MOSS-WSS]
[http://www.btexx.com/products/btexx-collaborationmanager/video]
Regards
Sahil Kohli -
Sso configuration in portal to share point portal
Hi,
Can you please provide me the steps to configure sso in portal to share point portal.
my requirement is to create an iview that displays the shrepoint portal home page without asking user credentials.
pls suggest UPID and logon tkt methods.
Thanks in advance.
Regards,
Sai Battula.Hi ,
You can opt for SAML.
Configuration from BASIS & Portal Side.
[Setup SAML 1.1-based Web SSO from NetWeaver CE to non-SAP systems ]
Configuration from Share Point side.
[http://technet.microsoft.com/en-us/library/ff607753.aspx]
Also you can check out the third party tool u201C btexx MOSS Integratoru201D .
[http://www.btexx.com/products/btexx-collaborationmanager/MOSS-WSS]
[http://www.btexx.com/products/btexx-collaborationmanager/video]
Regards
Sahil Kohli -
ESH 7.2 SSO Configuration failes
Hi,
I tried SSO Configuration for ESH 7.2 as described in document
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/00007511-5c0e-2d10-26bd-f30b7f433b9a?quicklink=index&overridelayout=true.
It was not able to me to call the custom service created
under /default_host/zes/... Therefore I had to copy this node
to /default_host/sap/zes/...
After calling
http://nwbs1db.intra.net.blanco:50100/sap/zes/opensearch/search the
redirect application will be called. SSO Ticket is issued but internal
service of ESH abap stack calls redirect application again. Due to this
fact I get an infinite loop.
Has anybody an idea where I should check my configuration again to solve this problem?
Thanks and best regards,
MatthiasHi Matthias,
I will notify the responsible colleagues about your post.
But can you log this as a support message to SAP as well, please?
After all, that is still the only way to get guaranteed atention by SAP (as opposed to community here) and also it is the way to get this into our official list of things to check and, if necessary, fix.
Best,
Karsten -
Windows AD SSO Configuration using Vintela
Hi All
We are doing a BOE XIR3.1 deployment with 4 machines, Weblogic 9.2 as the Application server, and oracle DB as the CMS and Audit Database, we plan to do the CMS clustering too.
BO1 used as CMS1 machine
BO2 used as CMS2 machine
BO3 used as BO clustering
WL used as the Weblogic machine for the Web-tier part.
We also plan to have the Windows AD SSO configuration done, as discussed we will be having 3 SIA node, SIA1 on the BO1 machine SIA2 on the BO2 (CMS cluster machine) and SIA3 on the BO3 machine (here all server components will be installed except the CMS and the u2018Web Appl container serveru2019).
During the SSO configuration, should the SIA1, SIA2 and the SIA3 be run under the server account?
Ie. In the properties of SIA, under the u2018Log on asu2019 section, will be using the DOMAIN\<service account>. Does this need to be done for all 3 SIAu2019s u2026. SIA1, SIA2 and SIA3 ?
- Thanks
RanjitIt only needs to be done where there is a CMS (per your scenario SIA1 & 2).
[Section 1|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0f6ac3c-b3ac-2b10-1b95-c9bd46194977] of my doc details planning your service account(s)
Regards,
Tim -
Setting up SSO between EP and back-end SAP systems
Can anybody give me some insight about setting up SSO between EP and back-end SAP systems. If possible some links to write up would be great.
ThanuHi,
This link gives you a detailed information on setting up SSO : http://help.sap.com/saphelp_nw04/helpdata/en/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
Some How-guides:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e676ec90-0201-0010-cfa3-90b7c1291903
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/77378b3d-0b01-0010-ffa5-c6941e286c43
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/80fbc690-0201-0010-1aba-93d5c8232b4a
Regards,
Sunil -
Unable to view BI Publisher report with SSO configuration enabled
Hi All,
Can anybody let us know the configuration of the BI publisher with SSO enabled. We are unable to see any of the BI Publisher reports. without SSO configuration we have integration working perfectly fine with the OBIEE and Publisher.
We followed the configuration steps to integrate BI Publisher with Oracle SSO. The following are the steps:
1. deploy analytics.ear as a new application 'analyticsSOAP' in OAS
2. protect analyticsSOAP in mod_osso.conf file under OAS
3. change OBIEE Presentation services configuration to use analyticsSOAP/saw.dll
4. run credstore utility to encrypt password
5.restart xmlp server
6.restart http server
7.restart obiee server
8. restart obiee presentation service
Still we have issues when we try to accesses BI Publisher reports by clicking more Products -> BI Publisher or view reports directly on the OBIEE Dashboard
Thanks in advance.configure one more virtual path which is unprotected from site minder. we had similar issue for Marketing and resolved by this virtual path.
ref:
http://vaandun-analytics.blogspot.com/2009/11/obi-publisher-with-empty-obi-catalog.html
Thanks
Sarathi -
How to configure bulk breaking articles in SAP retail
hi frnds...
This is my client needs...
How to configure bulk breaking articles in SAP retail for hyper market..
Scenario is like this... Ex: for MEAT
There should be a Parent article & child articles process.
i.e Chicken X - 100 corcoss is divide into child articles (A,B,C,D,E,F) like
Brest bone - 5kg - A
leg pieces - 2.5kg - B
wings - 2.5kg - C
P - 7.5kg - D
Q - 10kg - E
R - wastage - 50kg - F
these child articles wont consider for inventory
So how to configure this scenario in SAP Article master & to run this process.
Pl help me out with scenarioPlease have alook at
[http://help.sap.com/erp2005_ehp_03/helpdata/en/2b/b03889df3611d1953b00a0c930e0da/content.htm]
Material type WERT is correct.
In Material type maintenance you can control at all if a store will be value only inventroy managmenet or both.
Further in the Site master WB02, you can control it on MC level.
regards
B -
Configuration to send mail from SAP R/3 to SMTP ; Pls help
Hi All,
Could any one please send me the steps to configure the MAIL setup in SAP R/3 to SMTP (Third Party).
Thanks in Advance,
Sunil
[email protected]HI Suni,
Please follow the link below very helpful...
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=email&cat=sdn_media
1. tcode SCOT
2. double click SMTP>> check mark "Node in use" >> Mail Host : "mail.yourdomain.com">> click "internet set" if you want all email in/out, add * under address area. save/green check mark.
3. go back to SCOT >> Settings >> Default Domain,: it should be "yourdomain.com" >> SAVE.
4. View >> Jobs: Click Create button >> name it 'SENDMAIL'. green check marK >> click preodic, run every 5 min or 3 minz depending on your situation or load.
That's it. very simple.
Thanks, -
Hi
I referred the below url to store config info to SSO DB , from biztalk i am reading those values.
http://www.codeproject.com/Tips/559597/How-to-store-BizTalk-configuration-in-the-SSO-data
its working fine. i have used the MMC snap in tool to create configurable values.
but now i have a situation to store one more key/value in the same application via programatically.
i tried to use the below code snippet for storing values
SSOConfigStore ssoStore = new SSOConfigStore();
ConfigurationPropertyBag appMgmtBag = new ConfigurationPropertyBag();
object value = "Sample";
appMgmtBag.Write(propName, ref value);
((ISSOConfigStore)ssoStore).SetConfigInfo(appName, idenifierGUID, appMgmtBag);
but when i try to update , it is not updating the new key/value pair in the same application store. also, when i open the MMC snap in tool, i am not able to see the existing key/value pairs.
can any one please help me how to store the sso configurable values dynamically?
Thanks
VinothHi Vinoth,
Please have a look at this thread
http://social.msdn.microsoft.com/Forums/en-US/5b914e0c-50ea-4226-8f0e-7e15e2f482ae/biztalk-2013-sso-mmc-snapin-does-not-show-key-pairs?forum=biztalkgeneral
Probably, this will solve the issue of existing key/value pairs missing in MMC
Thanks,
Deepthi
DeepthiAdith
Maybe you are looking for
-
Error while creating source system in BI: Modification not possible
Hi All, We are about to move to production, and therefore it's necessary to create in BI the source system related to our ECC (R/3). While trying to perform this action from BI side we received the error message: SAP system has status 'not modifiable
-
itunes won't open on laptop?any help would be great
-
Contents of HTML title Tag not rendering in my AIR HTML component
I have an Air Application that uses a HTML Component. The HTML page that the component is rendering includes images with title tags. The tags render fine outside the Air Application, but when run in the AIR application, they do not render. Any help w
-
was just loading indesign and cannot start it. seem to have no rights for some presets. i deinstalled and installed new, same problem. who can help?
-
Dear All, How to track Payments outstanding and Payments received against each Purchase order. Regards, Srinivas