SSO from Microsoft ISA to SAP enterprise Portal

Hi Gurus,
Our vendors access the Internal network using MS-ISA as proxy.The first point of authentication is MS-ISA where the Vendor needs to give his User id and Password.After that he hits the Internal Portal and is prompted for a Login again.Is there a way to set up SSO from MS-ISA to SAP EP7.0 so that there is no need for second Logon.
Thanks in Advance!

The easiest, and common way to solve this, l but not the only way is to use ISA as a proxy and use the fact that the ID of the authenticated user can be stored in an http header variable (e.g. REMOTE_USER). This HTTP header variable can then be used by the back-end SAP system (internal portal) to authenticate the user and issue an SSO2 ticket so that the authentication only needs to occur first time they access a page on the SAP system.
The use of HTTP Header variables in SAP J2ee engine is widely documented on SDN and in SAP help library.
Thanks,
Tim

Similar Messages

SSO from Microsoft wabsite to SAP Portal

Hi
My client wants SSO from .net based Microsoft website to SAP Portals. Requirement is that when customer enters the website e.g. www.mysite.com , he will be automatically gain access (SSO) to SAP Portal .
How it can be done ?
Please help
Thanks in advance

Hi Ananda,
This link answers your query.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/interoperability/dotnet/_web%20services%20and%20a2a%20interoperability%20center/sample%20application%3a%20sso%20with%20a%20.net-based%20web%20service%20client%20using%20sap%20logon%20tickets.pdf
Reward points if handy!
Regards,
Sandeep Tudumu

Integrate a Oracle Forms Application in SAP Enterprise Portal

Hello togheter,
i would like to integrate a Oracle Froms Application in our SAP Enterprise Portal. We use Oracle Froms AS 10g v10.0.2. I read that oracle forms supports single-sign-on, but i don't understand exactly how does it works? What steps i need to do? Has anybody experience in this topic? Supports oracle forms application SAP Logon Tickets?
Many thanks in advance and greetz,

Hello, thanks for your answer.
I can't use the first option from you, because of the necessity to use SAP Logon Tickets.
If i understand everthing right, it is possible to implemant the SAP-Logon-Ticket-Libary in the integrated application. By Oracle Forms is this not possible, because it is a framework application. The authentification to the Oracle Forms application is transferred over the Oracle Application Server. It is also no possiblity to implement the libary in the application server.
Today i talked to the Oracle Support and they said that one solution is to use the Oracle Access Management as Middle-Software between SAP EP and Oracle Application Server.
What do you think about this solution? It is really not possbile to integrate Oracle forms in SAP EP with SAP-Logon-Ticket without an extra software?
Thanks in advance,

Configure SSO Connection from SAP Enterprise Portal to BOE Server

Hi Guys,
We recently installed a BOE Server and want to connect it to our SAP Enterprise Portal. What we need is just to display the Crystal Reports via Enterprise Portal. We have set up the following:
SAP EP with AD Authentication
SAP EP configured with SNC to SAP BI7 system
SAP BOE XI 3.1 - SAP Integration Kit
BOE Server configured with SAP Authentication via SAP BI7 System
We've also set up BOE IK iviews and URL iviews pointing to existing reports in BOE. However, when we access it from EP, it prompts for a username and login to BOE. Is there a way to configure these so that there is no prompt for login to BOE server and SSO is used? Is it also possible to have a service account (e.g. domain/crystal) that will run the reports in BOE everytime a user accesses a report from SAP EP?
Let me know if this is at all possible

Hi,
You should configure InfoView for SSO first, which required infoview.xml file modification, using windows AD default authentication. If you want to utilize the OpenDocument URL for iView then you also need to configure OpenDocument.xml file for SSO also. The SAP portal must have trust relation with the SAP BW server so the Windows AD token can be authenticate with SAP BW server.
If you want crystal user to run all the report then you will lose data security. It can be done by hard coding user name and password in the report properties and database logon but the SSO capability can be accomplished only by windows AD, SAP or LDAP.
For more details check BOXI Admin guide and SAP Integration Guide.
Thanks,
Muhammad

SAP Enterprise Portal Analysis

I am carrying out analysis on SAP Enterprise Portal.
I am searching information on these........
<b>
1. What is the expected adoption by SAP customers in the above areas (Market size in $):
2. What is the expected adoption in terms of number of clients in the same areas:
3. What is the distribution of the Market (numbers and size ($)) in terms of Geography in the same areas
4. What is the distribution of the Market in terms of Industry verticals
5.Competitor analysis
</b>

Hi Ainsley,
A work around? Yes and no and sort of ...kind of...
This turns out to be quite complex and tempermental.
In short, you cannot use Windows AD authentication, but instead use LDAP (with the Microsoft Active Directory). We were able to get this to work with much effort. The biggest limitation is that it supports a single AD forest.
I am giving a presentation on silent single sign on for BI4 and Enterprise Portals at the SAP BO User Confernce in Orlando and will see about posting the slides after the conference, but can share some of the resources here that we found to be most useful. Please reach out to me if I can help further.
Lee Lewis
•Integrating SAP BusinessObjects BI Platform 4.x with SAP NetWeaver, Ingo Hilgefort, SapPress 2011
•Configuring LDAP Manual Authentication and SSO for BI4 on Unix
•1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•Business Intelligence Platform Administrator Guide, SAP BusinessObjects Business Intelligence platform 4.0 Feature Pack 3, June 2012
•1670073 - How -To: Generate keystore and certificate in the process of configuring STS for SAP
•1687295 - How to configure Single Sign On (SSO) on the SAP Netweaver 7.x portal to BI4
•IBM - Configure single sign-on authentication on AIX
•1537480 - Best Practice: How To setup Active Directory Single Sign On when BOE CMS is on Unix or Linux
•Kerberos Explained - Microsoft Technet
•SAP Help - Secure Network Communications (SNC)
•Using Kerberos Authentication for Single Sign-On
•SAP Netweaver 7.3 Configuring Kerberos Authentication
•SAP BusinessObjects BI4 Active Directory SSO Tutorial
• 1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•1245218 - How to connect the LDAP plugin to Active Directory
Lee Lewis

Performance issue of BI Reports in SAP Enterprise portal -in SAPNW2004s

Dear friends,
We are integrating BI Reports in SAP Enterprise Portal 7.0 ( SAP NW- 2004s).The reports are running properly .But the issue here is reports are taking long time to open and leading it to performance effect.
Reports in BEX( Bi side) working lilttle better than EP platform.
And Even BI team is looking for ways to improve the performance.
Could you please share your ideas to implement in portal side to increase the performance.
Thanks and Regards
Ratnakar Reddy

Hello Mr. Reddy,
There are two possibilities for slow performance in BW reports, so we need to look into wether its slow in the BW system or at the frontend.
If the problem resides in the BW system then we should be able to trace the reports
and you can go for a SAP EW or GV sessin and SAP will provide recommendations.
If the problem resides at the frontend
Update the frontend servers to the latest frontend release.
Recommended Frontend Release 700
Recommended Frontend Patch 18
Update the frontend servers to the lates SAP GUI release as soon as possible.
Minimum Recommended SAP GUI Release 6.40
Your frontend PCs should fulfill the following requirements:
Each frontend PC should have 500 MHz and 128 MB main memory.
Because of a limit in the addressable memory, Windows 95 is not supported as Frontend OS for 3.X BW Systems. Please refer to SAP Notes 161993, 321973 and 366626 for details.
Please also check SAP Note 147519 "Maintenance strategy/ deadlines 'SAPGUI'".
If you still require any assistance from SAP support then raise a message under component ( probably BW-BEX-ET-WEB).
Provide your input, if you have any.
Thank you,
Tilak

SSO from Solution Manager to Wily Enterprise Manager issue

Hi,
We are facing problem in SSO from Solution Manager to Wily Enterprise Manager. We have done the configuration as per the Wily Enterprise Guide- "Introscope Version 8 Installation Guide For SAP" Page 38.
Our Solution Manager system is running on AIX platform and Wily Enterprise Manager is on Windows 2008.
This is what we are trying
SOLMAN Production Client --> SOLMAN_WORKCENTER --> INTROSCOPE WORKSTATION --> this opens a new browser page and from there we click on Start Introscope -->
Result --> SSO doesn't work, still we get login window.
Introscope Enterprise Manager logs says -->
9/12/11 10:47:17 PM BST [WARN] [Manager] Single sign on failed: No SAP single sign on ticket was found in the request header.
Note: Another Solution Manager system in our landscape (on windows 2008 platform) is connected to same Wily Enterprise Manager (windows 2008) and from this solution manager SSO to Wily Enterprise Manager is working.
Please help me with your expertise to solve this problem.
Best Regards
Davinder

Hello Singh,
Could you check if you have maintained these parameters in instacne profile ?
From SCN post -> http://scn.sap.com/thread/969538
Hi Hector,
To configure SSO as per initial setup guide, please check your profile parameters in your Solution Manager as below:
You have set up SSO, see also:
SAP Note 817529: Checking the SSO Configuration
Installation Guide and Security Guide for SAP Solution Manager
Create the following profile parameters in the instance profile:
login/create_sso2_ticket = 2
login/accept_sso2_ticket = 1
icm/host_name_full = fully qualified server name
This parameter must be attributed to the fully qualified server name (for example wdfd002568.wdf.sap). The name must contain at least two periods. See also SAP Note 434918.
Hope this helps,
Regards,
-Rohan
BR,
kamil

Business Object, SAP BW and SAP Enterprise Portal

Hello all,
I've a few questions about the possibility for linking Business Object, SAP BW and the SAP Enterprise Portal.
The Business Package MSS 1.41 give us a functionality to display (in a federated portal) personalized Budget and costs in an Overview Iview (kind of Welcome page).
Those information are retrieved from SAP BW and I'd like to know if it's possible to retrieve those data (with the same functionality) from Business Object tool.
Is it possible to have those personalized reports without having a direct link (standard architecture) between SAP BW and the federated portal?
Thank you in advance fro your answers.
Matthieu

Hi,
The procedure to replicate BW users in BO is explained in detail on the blog of Ingo Hilgefort:
/people/ingo.hilgefort/blog/2008/09/19/businessobjects-and-sap--configure-sap-authentication
Regards,
Dave

Integration of SAP enterprise portal with ATG dynamo platform

This is more an architectural question.
There is an existing web application running on the ATG 5.x/6.x B2C platform that takes orders from dealers for a retailer. It integrates with a SAP system using proprietary integration mechanisms. This is the existing architecture.
There is a idea to use the SAP netweaver platform, specifically the SAP enterprise portal that will integrate with the ATG dynamo platform.
ATG 6.2 and above allows integration in 2 ways :
1) Use web services
2) Integration framework using JMS/RPC etc
[Pl. see the ATG documentation www.atg.com/support]
I have been reading thru number of articles on SAP netweaver and looking for multiple options for the above integration.
My theoretical understanding is:
a) Develop a connector to the ATG platform using connector framework and invoke a web service on the ATG platform that expose the business logic built on the ATG platform
b) Does SAP XI come into picture if the portal tries to create a business process out of one single application.
c) Are there any other options?
I'm completely new to the SAP netweaver platform but have a good idea on SOA.
Any help or inputs on this will be highly appreciated.

Hello,
I can give you a suggestion from the Connector framework point of view. We are currently developing a generic webservice connector which will enable to create content using CF, which will be sent as WS requests for function execution. The connector is planned to be released for New-York 7.1 Netweaver branch. For the mean time I can suggest, as you did, to develop your CF connector which will connect to ATG exposed WS.
Best Regards,
Ran

Changing the text "SAP Enterprise Portal 6.0" in the browser window title

Hi,
I want to change the standard browser window title from "SAP Enterprise Portal 6.0" to my clients company name.
Has anyone done this before?
Please help.
Thanks in advance
Padmamr

Hi,
To change the name of the browser:
System Administration > System Configuration > Service Configuration > Portal Runtime > Central Configuration.
Scroll down to: portal.html.head.title
and change to required name of your company.
Also, if you goto System Administration > System Configuration > UM Configuration > Direct Editing.
Here you will find a host of UME controls for logging on and logging off the Portal. You can change images etc... from here.
Remember to restart the Portal and components for changes to take affect.
Cheers

Pre-requisties of sap enterprise portal knowledge

Hi All,
i have got basic training on sap enterprise portal(admin part) and i got chance in one of the support project as sap Ep consultant .
actually i dont have any real time exposure in Enterprise portal ...in coming days my KT(knolwedge transfer) will be start ...pls share me the kt template related to sap enterpise portal ...what are the things do i need to ask on that kt? and what are things do i expect from that KT?.........................please help me out ...

So if you have NWBC, I understand from this discussion, that you do not need the SAP Portal. If that is the case,
(1) how can users working from home or from anywhere else have access to NWBC? Is it as easy as accessing a website? or do they have to first go through the company's firewall.
(2) If they can access it directly, do home users need special software on their PC e.g. SAP Gui etc??
(3) What would be the main reason why a company may not want to use NWBC but use the Portal.
Thanks
Pascal

VERY URGENT: Issue with Reconciliation against SAP Enterprise Portal

Hi,
We are using IDM7.0 and we have SAP Enterprise Portal as a resource. The users in portal are from Active Directory.
When I am doing full reconciliation against portal, it is processing only certain accounts. The reconcilaition policy is to link accounts. It is not linking teh accounts. Moreover, these accounts are not found in UNMATCHED accounts also. I don't have any account exclusion rules or something.
I wrote a small code snippet, which does just a single account reconciliation of a particular user id. In this case the portal account is being reconciled and linked properly.
Any ideas what the issue might be?
And I have another question too.. in the schema attributes of the out-of-box SAP Portal resource adapter, I don't see any ammping entry for "accountId". Usually for other resource adapters there would be entry for accountId (e.g in AD, mapping is: accountId <---> sAMAccountName). In case of portal, do we need to explicitly set this mapping? If so what would be the right hand side name in the schema? Does the right hand side name changes from one deployment to the other? If so how to determine what attribute maps to accountId in our portal? Might this lack of accountId is causing the issue with the reconciliation?
Any leads would be highly appreciated.
Thanks,
kIDMan.

Thanks for the reply. I have already set up correlation rule, account linking options for different situations like FOUND, UNASSIGNED, UNMATACHED etc. If my linking configurtaion is not correct then the fetched accounts should be atleast in the account index with situation as UNMATCHED. But that is not the case.
I am not sure if I made my problem difinition clear earlier. The problem I mentioned is not with "linking" of the accounts. The problem is IDM is detecting only some accounts. Among those set of accounts which IDM was able to fetch from portal during reconcilaition, it was able to successfully link the matching accounts to identities in IDM.
My question is, why IDM is fetching only certain accounts and not all accounts from portal resource.
As I mentioned earlier, when I run my code snippet to reconcile a single account, it reconciles successfully and links to user identity in IDM (if a matching idenity exists based on my correlation rule). But why the reconcilaition at the resource level is not able to fetch and reconcile teh same account.
Regarding the accountId attribute in the attribute schema, neither the SUN documentation nor the resource adapter configuration tells about the name of the attribute on the portal side that it should match to.
Thanks,
kIDMan.

SAP Enterprise Portal - Post Installation Tasks

Hello everyone,
I am a beginner in the area of SAP Enterprise Portal. Please bear with me in case if I ask you stupid questions.
"Our idea is to deploy the BIW 3.5 IVIEW over the portal"
I have installed the SAP Enterprise Portal 6.0 SP6 on Windows 2000 server environment. I have followed the install guide and I have done the installation successfully. I am also able to logon to the portal server using the irl url http://sodium:5000/irj/portal as an Administrator.
As a BASIS administrator point of view, what are the next Post Installation activities that I need to perform?
(Our idea is to deploy the BIW 3.5 Iview over the portal)
I really appreciate your responses.
Thanks & regards,
Nikee

Hello Nikee,
Simply define the SAP BW system, add an Alias, import portal certificate (for SSO), and start creating functional iview that can render your BW queries and reports.
Create a System pointing to the BW server with the following details:
a) System ID
b) Client
c) Web Access Point with "WAS" as category containing the following
entries: -
· Protocol
· Hostname
Note: Domain name of WAS should be same as portal domain
After that create BW iviews
QueryString is in the form "CMD=LDOC&infocube=myCube&query=myQuery"
You should have WAS on the BW server and also IGS shall also be present.
To follow with the latest, see note #489961 and
http://help.sap.com/saphelp_nw04/helpdata/en/33/39fa40ee14f26fe10000000a1550b0/frameset.htm
Hope this will help.
Regards,
AAAttar

TEP15 SAP Enterprise Portal and KMC Development Book Required.

Hi everyone....
can someone please let me know where i can download book "<b>TEP15</b> - SAP Enterprise Portal and KMC Development" from?
Its urgent please.
Thanks in advance.
Regards,
Tejas

See https://forums.sdn.sap.com/thread.jspa?threadID=398494

Performance issue of BI reports in SAP Enterprise portal

Dear Friends,
We have integrated BI reports with SAP Enterprise portal 7.0.Reports are running properly But the issue is reports are taking more time to dispsaly its content and leading it to performance effect.
In Bex ( BI side) reports performance is little better than SAP EP platform. BI Team also looking for ways to improve performance at BI side.
Could you please share your valuable ideas to improve the performance at SAP EP side also ..
Thanks and Regards
Ratnakar Reddy

Hi ratnakar,
The first step is to identify which component is causing the performance problem. Run your report in the portal but try appending the string &PROFILING=X in the end of the URL. This will generate BI statistics which you can use to see which component (Java stack, ABAP stack, Database) is causing the performance issue.
Hope this helps.

SSO from Microsoft ISA to SAP enterprise Portal

Similar Messages

Maybe you are looking for