SSO for portal desktop

Hi,
how to impliment sso for applications that i developed.
i created tabs and added the channels to container.
now i wants to that maintain the session .
i.e, once a user enters into portal desktop.and he clicks the tab and
enters user name and password.and when he goes other tab and comes
back then it has to maintain the state.but now here it asking again username
and password
Please help
advance thanks
javaraju

Hi,
Thanks for response.
I customized the sample portal and added channel to tabs.and added iframe to that channel and added some url's and when a user clicks that url and enters user name and pasword and if he goes to other tab it has to maintain it state
how it is possible
thanks in advance
javaraju

Similar Messages

SSO for portal desktop for my applications

Hi,
how to impliment sso for applications that i developed.
i created tabs and added the channels to container.
now i wants to that maintain the session .
i.e, once a user enters into portal desktop.and he clicks the tab and
enters user name and password.and when he goes other tab and comes
back then it has to maintain the state.but now here it asking again username
and password
Please help
advance thanks
javaraju

I guess this thread is a duplicate - correct?

SSO for portal ESS applications

Hi all,
We have implemented ESS in Portal.
But we need to access the ESS modules outside the portal .. i.e,
We need to access ESS applications from a .net portal..
goal is to acheive SSO from a .net portal to SAP Portal..
How to Acheive this. any approches/ best practices??
Points for useful answers..
Hari

Hi,
can you take a look at this thread: Re: SSO from SharePoint CMS to SAP EP that is connected to CUA
The idea would be to "force" the users to log on to the portal (so that they have a SAPLogonTicket), redirect the users to your .Net application and from there they can access ESS scenarios (since they do have a SAPLogonTicket now).
Regards,
Holger.

Bookmarks channel in the sample portal desktop

I've installed the sample portal and created a new organization that uses the sample portal layout. I'm trying to figure out how to add new bookmarks so that any users in my organization get the new bookmarks by default and don't have to add them manually.
I thought I had already added the new bookmarks but when I log in as a user in my new organization, the new bookmarks do not show up in the Bookmarks channel.
I must be missing something... here's what I did:
1) logged in as amadmin
2) selected Identity Management tab
3) selected View: Organizations
4) clicked on the organization name
5) selected View: Services
6) clicked show properties for "Portal Desktop"
7) clicked "Manage Channels and Containers"
8) clicked "Edit Properties" for the Bookmark channel
9) clicked on "targets"
10) clicked "New..." and added two new bookmarks
11) clicked save
When I log in as a member of this organization, I don't see the two new bookmarks.

It turns out that steps 9 and 10 were incorrect. The fix is to modify steps 9 and 10 to:
9) Click Client=HTML link, then click "targets"
10) Click new, and change the type from string to un-named string (add the rest of the new entry)

SSO for SAP and Non-SAP applications without Enterprise Portal

Dear all,
Is it possible to implement SSO for both SAP and non-SAP applications without involvement of EP at all?
I have gone through this link.
<a href="http://help.sap.com/saphelp_nw04s/helpdata/en/e5/4344b6d24a05408ca4faa94554e851/frameset.htm">http://help.sap.com/saphelp_nw04s/helpdata/en/e5/4344b6d24a05408ca4faa94554e851/frameset.htm</a>
But I still i am not able to get the precise answer on how to enable SSO for both SAP and non-SAP applications without EP.
We have decided not to implement EP in first phase of SAP implementation. But we need to enable SSO for other SAP and Non-SAP applications.
A detailed description on how to deal this kind of scenarios will be helpful.
Thanks.

A client of our's uses <b>SAP Enterprise Portal</b>, and is using the SAP SSO, which is implemented with tickets, and requires the use of SAPSECULIB. My company provides an application for this client, and our application in hosted in our data center for the client, as a Software as a Service application, obviously across the internet. Our client, which owns a SAP license, has asked that we support the SAP SSO as a non-SAP SSO application. The client user's SSO ticket will be created from SAP EP, and then passed across the internet to our application, and we are to use that SSO ticket as an authentication ticket to our application. I beleive I know how to do this work technically, having reviewed the SAP document named: "Dynamic Library for Verifying SSO Tickets in Third-Party Software" Specification Version 2.00 December 2005.
My question is, does my company have the right to use the SAPSECULIB? Where is the official download and <b>license</b> download, that indicates we can download this library, and use it to support a SAP customer? We do not own a SAP license. Thank you for your help. I have searched many places in SAP support.<b></b>

Creating portal desktop for the user

Hi All-
Please help me out...
1) Could you let me know the detailed procedure ( if possible please provide screen shots) to create "Portal Desktop for the user".
2)Suppose we developed a webDynpro Application and we need to make it Role Based access....please let me how to achieve this..
3)Help me out in creation of "Roles" in Portal Content Development and the steps to assign pages to "Roles"
Regards,
Cris

Hi Cris,
Follow these links for the required info.
Creating Portal Desktop for specific user
Portal Branding for specific user
Creating Roles & worksets
http://help.sap.com/saphelp_nw04/helpdata/en/4f/bceaffeb8c114ebef8255b63079c7c/frameset.htm
Integrating webdynpro in portal
https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/library/uuid/2fffe990-0201-0010-aab0-e61c3250bcf3
Hope I am helpful.
Cheers,
Santhosh

SSO for Enterprise Portal 6 with different Portal and R/3 userIDs

Hi there,
We are using SNC library for SAP GUI logon to R/3 and SPNEGO for Web access to EP. What works for us currently is:
SSO from Windows logon to Portal using SPNego (LDAP as our datasource with AD)
However once we are inside the portal, the SSO to R/3 using SNC is not working. I have my Portal user mapped to my R/3 user as they are different usernames.
But, if i launch SAP GUI on its own i can SSO into R/3 no problem.
So, i have 3 queries here!
1) Why am i not able to SSO into R/3 once i have SSO into Portal?
2) Is there any way around the high maintenance of the user mapping?
3) I have read on SAP Help about "Using an LDAP Directory Attribute as the ABAP User ID" but this will still require user / administrator to maintain the R/3 password.
Is it possible to disable the R/3 password and thus have no maintenance as the R/3 (ABAP) User ID will be stored in LDAP attribute?
Hoping you can help...
Thanks.

Answers below:
1)
When you say "ITS" I assume you are referring to the Integrated ITS in NetWeaver, not the external ITS product ?
Anyway, if you are referring to Integrated ITS, then surely you are using webgui, not SAP GUI. The webgui is accessed via browser and is not related to SNC or SAP GUI product. The SAP GUI product is a Windows application that uses SNC to authenticate to SAP systems.
If you are logged onto portal, which is a J2EE application and trying to access webgui which is running on ABAP Engine, then this might not work becasue your SSO2 trust is not setup correctly. Do you see an error in work process log saying anything about why the SSO2 ticket is not accepted ? Also, if ABAP and JAVA are on same system and Java Engine was installed as an add-in, you might need to create new SSO2 certificates to avoid a clash, and change client number from 000 to something else so SSO2 tickets issued in J2EE engine are differentiated from SSO2 tickets issued by ABAP Engine, but they are still trusted through configuration in STRUSTSSO2 t-code.
2)
You need to use a different product, which is available from a SAP partner to do this. I am not allowed to mention third party products on this forum, so if you want to know more you will have to contact me offline via email.
3)
See answer to question 2.
Thanks,
Tim

Using URL Alias in "main rule" for a new portal desktop.

Hi
I am having a scenario :
I am having two different business functionality. For accessing them separately i have to create to different portal desktops. Each one will have there own iviews and roles.
BUT
They can have similar user ids.
I.e. same user can access both the deskops based on option selected by him.
Supposed Implementation which i am thinking :
i will create a html page with 2 buttons :
1st button : Application 1
2nd button : Application 2
I will map these buttons/Links to following URL.
Application 1 : irj/poral/application1
Application 2 : irj/poral/application2
On clicking either of these buttons/Links user will get a login screen for SAPNETWEAVER PORTAL.
After login which desktop to be displayed will be decided using following MASTER RULE :
Now i will create a master rule with "URL ALIAS" in IF condition.
My Master rule will look like this :
IF URLAlias = irj/poral/application1 THEN desktop = Application1
IF URLAlias = irj/poral/application2 THEN desktop = Application2
Now I am having 2 questions in mind :
Is this possible ?
How to create URL Alias for a desktop ?? (Or do i need to create a URL alias for desktop !!)
I cant try it until and unless i am sure !!
Please comment on my scenario....
Or tell me if there are some other options.........!!

Saurabh,
yes this should work, you have to create the aliases application1 & application2 in the web.xml (see http://help.sap.com/saphelp_nw70ehp1/helpdata/de/48/1d5d0171364269e10000000a421937/frameset.htm)
I think, the initial page with the buttons shouldn't be located in the portal, because then the users would be already logged on (but you can place it on the java-stack at the plain http anyway)
but keep in mind, that you have to create an alias in web.xml & a master rule for each alias you want to have.
kr, achim

Access to portal desktop denied through gateway

I'm trying to get the gateway component to configured and working. I've installed gateway on a separate box from my portal server. When I go to the gateway url (using either https or http) I get prompted to login. Once I submit my user credentials, I get this message:
Access to this resource is denied !!
Contact your administrator
If I enter incorrect user credentials, I get an authentication failed, as expected. So authentication is working, but for some reason, I just can't get to the portal desktop! I ensured that my user account has the Access List service. And I haven't changed any URL allow/deny lists from whatever the default templates were, they still allow *.
Any ideas?
Thanks,
Patricia

Are you able to get to the portal desktop without going throwing the gateway ?
What the does the debug error logs show ?

SSO for a BSP-appl that is called by a complete URL?

Hi,
is it possible to use SSO while calling URL's? The called URL is another BSP-application on the same WAS.
I have a special situation:
My BSP-application has only one "html"-page that has a frameset in which another BSP-application is loaded. The outer BSP-application is inside a BSP-iView and SSO works fine for it. This outer BSP-appl. is only a wrapper for portal-events. It has a JavaScript-function that receives the portal-event.
Depending on the events the outer BSP-appl. loads another BSP-application with some parameters inside the frameset. This application will be called with a whole URL like:
First I need to destroy the session: http://mycompany.com:8000/sap/bc/bsp/sap/z_test_start.htm&sap-sessioncmd=CANCEL
Then I will load the BSP-appl new: http://mycompany.com:8000/sap/bc/bsp/sap/z_test_start.htm
But now I must enter user/pw in the pop-up window. Is it now possible to add/send the SSO-ticket to the called URL? The BSP-application I call with the whole URL is situated on the same WAS as the other BSP-appl for which SSO works fine.
Thanks a lot for any idea.
Regards,
Henning

Hi,
the parameters are set.
SSO is working correct with other iViews. One iView shows a Java Web Dynpro application which is running on the same server. Even transaction iViews work fine. --> ABAP part is set correctly for accepting/creating SSO
Even the BSP is working with SSO if I include it within an BSP iView. Only if I change the whole URL within the iView it is not working correct any longer.
I do the following within the BSP-iView. It's a wrapper for portal events, that opens another BSP application with the whole URL. The URL is sent to the iView from another portal application.
<%@page language="abap"%>
<%@extension name="htmlb" prefix="htmlb"%>
<SCRIPT src="epcfproxy.js"></SCRIPT>
<script language="javascript">
if(window.document.domain == window.location.hostname){
document.domain = document.domain.substring(document.domain.indexOf('.')+1);
    EPCMPROXY.subscribeEvent("urn:com.company:DCEvents","testevent", window, "event_test_handler");
    function event_test_handler( eventObj )
        var pernr = eventObj.dataObject;
        ocument.getElementById('iframetest').src=eventObj.dataObject;
</script>
<htmlb:content design="design2003">
<htmlb:page title = "Test">
    <iframe src="" width="100%" height="700" name="iframetest"></iframe>
</htmlb:page>
</htmlb:content>
Henning

SSO between Portal and Nakia.....problem with SSO... library not found..

Hi Sdn's and Nakisa tehnical experts,
We have a Portal environment 7.02 , a Nakisa environment 3.0 (CE) and and HR backend environment 701 (604).
We are busy setting up SSO between Portal and Nakisa via the, URL iview for the Org chart (http://<host>:<port>OrgChart/default.jsp).
We have done as indicated in wiki:
http://wiki.sdn.sap.com/wiki/display/ERPHCM/SAPSSOAuthenticationwithverify.pseusingSAPSSOEXT
We are however stil having issues with the SSO and in the cds.log the following is being displayed:
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.mysap.sso.SSO2Ticket : Could not load library: sapsecu.dll - java.lang.Exception: MySapInitialize failed: rc= 14null++
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0++
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Internal error (9) - No SSF error (0)++
Can someone indicate what I am doing wrong?
Regards Dries

Hi Luke,
thanks a lot for your help so far.
I have created a root/XML folder under the diretory, and the path is now as follows:
K:\usr\sap\NKP\J14\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__Sasol_DEV_LIVE\.delta\root\XML
It seems like it finds the verify.pse, but not the library, sapsecu.dll.
My credentials.xml file is as follows:
<credentials>
<assembly name="SapSso"/>
<info>
    <item name="PseFilePath">XML\verify.pse</item>
    <item name="SsfLibFilePath">XML\sapsecu.dll</item>
    <item name="PsePassword"></item>
    <item name="WindowsPlatform">64</item>
    <item name="TicketFile"></item>
    <item name="Base64decode">true</item>
   </info>
</credentials>
I however stilll get the following in the cds.log
15 Aug 2011 13:59:53 INFO com.nakisa.Logger - Tenant ID: 000
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - LoginSettingsObject Load: 1719
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Credential provider SapSso
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Using cert: K:\usr\sap\NKP\J14\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\XML\verify.pse
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Ticket is: AjExMDAgAA9wb3J0YWw6eXNzZWxhZ2OIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIWVNTRUxBR0MCAAMwMDADAANEUDkEAAwyMDExMDgxNTExNDcFAAQAAAAICgAIWVNTRUxBR0P%2FAQQwggEABgkqhkiG9w0BBwKggfIwge8CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGBzzCBzAIBATAiMB0xDDAKBgNVBAMTA0RQOTENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTEwODE1MTE0NzIwWjAjBgkqhkiG9w0BCQQxFgQUK13ubzFiQrY4H%2FLRk2ysyvPSvccwCQYHKoZIzjgEAwQuMCwCFF1W9d!tAjLvP8dnb1bs4XghaHSBAhQ9kd9N!bJubUWITtkzU!za96lxNg%3D%3D
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Version of SAPSSOEXT: SAPSSOEXT 4
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : SCUE LIB base path is:
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.mysap.sso.SSO2Ticket : Could not load library: sapsecu.dll - java.lang.Exception: MySapInitialize failed: rc= 14null
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Internal error (9) - No SSF error (0)
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User to authenticate null
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Authentication provider SapSso
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User authenticated null
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Authentication row is {SapSsoTicket=AjExMDAgAA9wb3J0YWw6eXNzZWxhZ2OIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIWVNTRUxBR0MCAAMwMDADAANEUDkEAAwyMDExMDgxNTExNDcFAAQAAAAICgAIWVNTRUxBR0P%2FAQQwggEABgkqhkiG9w0BBwKggfIwge8CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGBzzCBzAIBATAiMB0xDDAKBgNVBAMTA0RQOTENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTEwODE1MTE0NzIwWjAjBgkqhkiG9w0BCQQxFgQUK13ubzFiQrY4H%2FLRk2ysyvPSvccwCQYHKoZIzjgEAwQuMCwCFF1W9d!tAjLvP8dnb1bs4XghaHSBAhQ9kd9N!bJubUWITtkzU!za96lxNg%3D%3D}
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User population provider is Database
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner : ensurePool : Current pool size:0
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner : ensurePool : Current pool size:0
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner.executeFunctionDirect: /NAKISA/RFC_REPORT took: 266ms
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - BAPI_SAP_OTFProcessor_Report : WhereClause : ( (Userid is null) or (Userid='') ); Table : (SAP_UserPopulation); Dataelement : (UserPopulationInfo)
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User populated
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Role mapping provider is: SAP
15 Aug 2011 14:00:00 ERROR com.nakisa.Logger - SAPRoleMapping_SAP.MapRoles() : while trying to invoke the method java.lang.String.toUpperCase() of an object loaded from local variable 'value'
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Login process finished with errors
Any ideas? Should I maybe hardcode the location in the credentials.xml?
Kind regards
Dries Yssel

SSO between Portal and Java WD application

Hi Experts,
I am using CE 7.2 on localhost and I am very new to SAP.
I need to know how can I get SSO between Portal and Java WD. I have a WD application that displays the logged in user using "IUser currentUser = WDClientUser.getCurrentUser().getSAPUser()", as well I can use "IUser user = UMFactory.getAuthenticator().getLoggedInUser()". Both work.
Q1. What is the difference in the 2 above?
Q2. My WD application is set to authenticate user. The WD application is in URL iView. I need SSO between Portal and WD application. Is there a way to get this SSO without SAP Backend (ECC), for now I just need SSO between Portal and Java WD appl.
Everything is in localhost.
Please advice. Thanks.

> need to know how can I get SSO between Portal and Java WD.
Then I suggest you ask your question in the Web Dynpro Java forum instead of the Web Dynpro ABAP one.

SSO from Portal to a ITS (standalone) to the R/3 backend

Dear all,
I have the following situation:
1. I have successfully installed SSO between Portal and the Backend system. That works fine.
PORTAL -> D98 (R/3 System with 4.7)
2. The backend system has no ITS because it's SAP R/3 4.7 without ITS.
PORTAL -> ITS (Standalone) -> D98 (R/3 4.7)
Question:
I have to create now a connection from the SAP Portal to the ITS and so on in the backend system with SSO.
Which settings are necessary to create SSO over a ITS system like this:
PORTAL -> ITS (Standalone) -> D98 (R/3 4.7)
Who could help me?
Thanks for your effort.
Kind regards,
Thomas

Dear Ansar,
Sorry, but I don't find this note.
Note 56691
Could you please give me the right note?
Thanks a lot for your help and your effort.
Kind regards,
Thomas

SSO for Web applications

Hi,
I want to implement SSO between my portal and web applications. i found some documents but not sufficient information. what would be the correct source of information if i want to impalement SSO between Portal and Web server(non SAP).
Any help is appreciated.
Thanks,
Damodhar.

Hi,
i have gone through the some documentation, i am giving the links to help for the others if anyone go through this thread in future.
Logon tickets for the sap and non sap systems, it's good.
SAP Logon Ticket-based Single Sign-On
SSO with SAP logon ticket- Security issues
SSO with SAP Logon Ticket - security issues
we have another document but the document has been moved to another link, can you suggest me link for the following document.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/enabling single sign-on from sap j2ee engine to non-sap java applications.article
the above link has been moved, can anyone suggest me the correct link for the above document.
Thanks,
Damodhar.

SSO for Forms9i & Rep9i applications

Hai all,
We have developed forms9i & Reports application(around 3 applications .
We want to use SSO for authentication process and expose this application as portelts in 9iAS portal release2.
Can any body give the steps to follow.
How to configure forms9i apps in Portal?
As partner applications or external application?
If partner applications which mechanism ia goob.
Mod_osso or PDK?
Regards,
Sreenivas

Anupam,
Thanks for response.
Can users create the resources themselves? if yes what user interface is available for this?
Do you know how the users can change their password for a particular resource if it changes?
Harish

SSO for portal desktop

Similar Messages

Maybe you are looking for