SSO from non-SAP J2EE to NW04 ABAP WebService

Hello,
I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
I must stress that username/password is not a solution.
Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
Best regards,
Thomas Mouritsen

>
Thomas Mouritsen wrote:
> Hello,
>
> I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
>
> I must stress that username/password is not a solution.
>
> Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
>
> Best regards,
> Thomas Mouritsen
Well, the best solution would be using message-based authentication (WS-Security) - either "X.509 Token" (digitally signed message) or "SAML (1.1) Token". Unfortenately you are using an older ABAP system where this feature is not available.
Especially regarding Web Services it is definetly worth to consider upgrading to NWAS 7.0 Enhancement Pack 1 (or at least: NWAS 7.0 with SP14 or higher).
But it also depends on the capabilities of "your" J2EE server. Does it support WS-Security and SAML Tokens? Can it servce as SAML Source Site?
Transport-level security (e.g. SSL with X.509 client certificates) will not help in your scenario (system-to-system calls). It would only be an option if the WS Consumer is an User Agent (-> SSL client represents a single user); only then X.509 client certificates can be used for SSO.
Best regards, Wolfgang

Similar Messages

SSO from Non-SAP portal to EP

Hi.
We need SSO from Non-SAP portal to EP.
The Non-SAP Portal has publish Form-based authentification.
I mean userid&password set to URL.
Then the EP can generate SAP Logon ticket to backend system?
regards,

How to Enable Single Sign-on with Non-SAP Web Application
I have very good material coollected for the same implement this.
http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a7b5ba90-0201-0010-4dbc-8f999dcd2798
Cheers!!
SJ.

SSO from non-SAP application to EP system

Hi all,
Is it possible to configure the Single sign-on from non-SAP application to SAP Enterprise portal?
My requirement is
I have a link to "Enterprise Portal" in my company's website home page. If I click on the link, it should directs to EP portal with out asking for logon.
Please suggest, is it possible??
Regards,
Sujoy

Hi Sujoy,
SSO implementation to non-browser applications i.e non-SAP systems is possible in 3 ways which are listed .Can find useful info in the below links.
http://help.sap.com/saphelp_nw70/helpdata/EN/12/9f244183bb8639e10000000a1550b0/frameset.htm
among the non-browser applciation if it is an MS dotnet system then the below article will give a clear understanding of SSO implementation.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f05ae0f0-bf93-2b10-ed9e-a7320c012841
Regards
Supraja

SSO from non-SAP to SAP apps

Hi All,
Currently We have SAP applications, non-SAP applications(java, .NET, PHP etc) in our landscape.
If the client tries to access any non-SAP application it should ask for authentication and thereby for any subsequent access to any URL's(SAP or NON-SAP apps) it should not ask for any authentication.
FYI:
The client logins into SAP Portal(SAP to NON-SAP) first and thereby able to achieve SSO for non-SAP applications as well.
Currently we are stuck for the scanerio of Non-SAP to SAP apps ?
Please suggest.......
Thanks,
Mano.

Hi samuli,
Using SPNEGO, we can incorporate windows authentication for SAP Portal ( after desktop authentication user can logon without userid/password). But for non-sap apps this would be challenge.
I have another option, using webdispatcher if we enable server redirect for all applications(SAP & NON-SAP) and get authenticated centrally by which SSO can be achieved across all the apps.
Would above solution work ?
Thanks,
Mano.

SSO from non sap application server to SAP systems

Mysapsso2 cookie has been generated after we are login into the portal https://FQDN/irj/portal for all the backend systems in client browser. Since it is working fine. After login into the portal , while clicking the URL iview of external JBoss application sever in portal home page and it is shows the new windows pop up login page. After login into this external JBoss application server, we have configured work item for SAP ITS WEBGUI login page of the backend system inside this JBoss appliaction. Here we need to pass the mysapsso2 cookie information in SAP WEBGUI, so that login page is bypassed using SSO. Kindly do give some suggestion for fixing this issue. Kind Regards, R Rajavelu

Try to use it Appsintegrator to access the non sap application from SAP Application

SSO from non-SAP (Webspher AS) to SAP (EP)

Hi,
We need to connect in SSO an WebSphere Application Server with SAP EP.
In practice our users will log on Corporate Portal, go to a section in which there will be a link to SAP EP (in particular access to the functionality ESS and MSS).
How do I implement a SSO for my scenario?
All the documentation I found is from SAP EP to a non-SAP application and not vice versa.
Best Regards.
Diego.

>
Diego Garofalo wrote:
> Hi,
> We need to connect in SSO an WebSphere Application Server with SAP EP.
> In practice our users will log on Corporate Portal, go to a section in which there will be a link to SAP EP (in particular access to the functionality ESS and MSS).
> How do I implement a SSO for my scenario?
> All the documentation I found is from SAP EP to a non-SAP application and not vice versa.
>
> Best Regards.
>
> Diego.
Question: which kind of authentication mechanism is used when the users will log on Corporate Portal ?
It might be a smart idea to use the same authentication mechanism also for SAP EP.
Well, if not only SSO (Single Sign-On) but also SLO (Single Log-Off) is demanded, then you should focus on SAML 2.0 - provided that all parties do support it. NetWeaver will support SAML 2.0 with a future release, so this is only an outlook for you by now.

HELP - AppIntegrator iView SSO to non-SAP J2EE

I've created some basic Application Integrator iViews that attempt to log in to our product via SSO using Login Tickets.
When I run our app "natively" on the SAP J2EE Engine (NetWeaver), it works fine... i get my MYSAPSSO2 cookie and I can parse it, etc.
If I try to point the same System to an instance of our app running elsewhere (on JBOSS in this instance), I am not getting the cookie, even though the configuration is exactly the same.
I'm a bit of a "newbie" so please let me know if I'm missing something obvious. There's so much documentation available, I'm not sure what applies to me.
Alternatively, I can discontinue the use of the tickets and simply put the username in a HTTP request header... but I'm unsuccessful in getting that to work as well.
Getting frustrated! Please help!

Can't anyone help me with this one?
I'm running myself around in circles.
I have now discovered (no small means), that my EP and target app server must be in the same domain... they are.
But when i fully qualify the domain name in my system definition, the iView no longer gets to the target system... i just get a blank page.
This is on NW SP16, if that's of any help.
This is getting urgent and I would appreciate any advice.

SSO from non SAP to SAP

Hi,
i have a requirement where the client has a web application i guess Cold fusion application .The user authenticates at the client web application level. After authenticating and clicking on portal link which is inside the client application he should be directly entering portal without any authentication.
I was thinking of JAAS login module is it possible
Thanks
Sushanth

Hello Sushanth,
Create a component in your cold fusion application wherein a user can at one time enter his portal username and password and store it in a table or so.
Now, the link which you have that redirect you to the SAP Netweaver Portal should have a target: http://<host>:<port>/irj/portal?j_user=<get ur mapped portal user here>&j_password=<get your mapped portal password here>.
This combined URL will open the portal without authentication.
Hope this helps.
If it did kindly consider rewarding points.
Regards,
Prem
SAP

Web Server Filter Based SSO to Non-SAP Apps

Hi,
I am following SAP Note 442401 for configuring the Non-SAP App for Web Server Filter based SSO using SAP Logon Ticket. Also, I have downloaded the 5_0_2_8.zip file.
The Readme doc of this zip file says:
"<b>Changes in Web server filter plugins
The Web server filter plug ins and the Ticket Toolkit now were separated.
See subdirectories for further information:
"C" the Ticket Toolkit
"filter" the Web server filter plug ins
This is the last released version (5.0.2.8) on SAPSERV.
Pleaser refer for newer versions to SAP Service Marketplace (http://service.sap.com/patches)
Technology Components-> SAP SSOEXT -> SAP SSOEXT</b>"
Zip file has two folders named "C" and "filter".
"C" folder has cpp code to varify the ticket.
"Filter" folder has DLLs for the different web servers.
So far so good . Now, what I want to know is that is placing the DLL from the Filter folder onto the respective web server and doing some configs, as per the PDF provided with ZIP file, enough?
Or do I need to do anything else, like writing any class to read and validate the Ticket?
Thanks,
Vivek

See Web Server Filter Based SSO to Non-SAP Apps

Data load into SAP ECC from Non SAP system

Hi Experts,
I am very new to BODS and I have want to load historical data from non SAP source system into SAP R/3 tables like VBAK,VBAP using BODS, Can you please provide steps/documents or guidelines on how to achieve this.
Regards,
Monil

Hi
In order to load into SAP you have the following options
1. Use IDocs. There are several standard IDocs in ECC for specific objects (MATMAS for materials, DEBMAS for customers, etc., ) You can generate and send IDocs as messages to the SAP Target using BODS.
2. Use LSMW programs to load into SAP Target. These programs will require input files generated in specific layouts generated using BODS.
3. Direct Input - The direct input method is to write ABAP programs targetting on specific tables. This approach is very complex and hence a lot of thought process needs to be applied.
The OSS Notes supplied in previous messages are all excellent guidance to steer you in the right direction on the choice of load, etc.,
However, the data load into SAP needs to be object specific. So targetting merely the sales tables will not help as the sales document data held in VBAK and VBAP tables you mentioned are related to Articles. These tables will hold sales document data for already created articles. So if you want to specifically target these tables, then you may need to prepare an LSMW program for the purpose.
To answer your question on whether it is possible to load objects like Materials, customers, vendors etc using BODS, it is yes you can.
Below is a standard list of IDocs that you can use for this purpose to load into SAP ECC system from a non SAP system.
Customer Master - DEBMAS
Article Master - ARTMAS
Material Master - MATMAS
Vendor Master - CREMAS
Purchase Info Records (PIR) - INFREC
The list is endless.........
In order to achieve this, you will need to get the functional design consultants to provide ETL mapping for the legacy data to IDoc target schema and fields (better to ahve sa tech table names and fields too). You should then prepare the data after putting it through the standard check table validations for each object along with any business specific conversion rules and validations applied. Having prepared this data, you can either generate flat file output for load into SAP using LSMW programs or generate IDoc messages to the target SAPsystem.
If you are going to post IDocs directly into SAP target using BODS, you will need to create a partner profile for BODS to send IDocs and define the IDocs you need as inbound IDocs. There are few more setings like RFC connectivity, authorizations etc, in order for BODS to successfully send IDocs into the SAP Target.
Do let me know if you need more info on any specific queries or issues you may encounter.
kind regards
Raghu

SSO to non SAP Application (ASP)

We have followed the sample steps for SSO to non SAP Applications in ASP, but we're receiving the following results:
Start SSO2TICKET main
Version: SAPSSOEXT 2
Ticket verifying failed. Return codes error=1 and ssf error=0
Does anyone know what the problem is and how to solve it?
Thanks!

hi ive,
u cn refer to this links.......these r some of the blogs that u cn go throu.its useful.
<b>User Mapping-based Single Sign On,
SAP Logon Ticket-based Single Sign-On>
regards
bhargava

SSO to non sap

We are trying configure SSO to non SAP system using the IIS web filter. We were able to configure the web filter to receive the header variable authentication but the non SAP system is not recognizing it. Could any one of you share the document or throw some ideas on this. Your help is much appreciated.

Dear Ramesh,
Check this note 735639.May be this note will give an idea to narrow down the problem.
Best Regards,
Shyam Dontamsetty

SSO FOR NON SAP APPLICATIONS

SSO for non sap applications in EP on which siteminder sso is integrated
Posted: Aug 28, 2006 7:09 AM Reply E-mail this post
Hi ,
we have implemented Siteminder on SAP PORTAL 6 SP16 for authentication.I would like to integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder external authentication is implemented.
can anybody help for getting step by step document.
diff rewards to be given

Hi,
if you have access to service.sap.com via S-User, you can download "SAP Enterprise Portal Security Guide" in the portal section. It has dedicated descriptions about SSO-Settings, also about netegrity.
You can also search help.sap.com about "SSO" which gives you overview descriptions.
On SAP Service Net, there is also an pdf "Integrating Security functions" in the Netweaver 2004s Portal section, where the description of the Java API for the PDK is included. This is very helpfull for coding.

Uploading data from non sap system to sap system

hi to all experts,
my requirement is to upload data into the sap system from non sap system . the data is in a flat file ,but the problem is that in the flat file all the field lengths and fields are not in order or same as sap system. How to upload the data into sap system ....

hi,
the data is in a flat file,but the problem is that in the flat file all the field lengths and fields are not in order or same as sap system.
If the data is in excel sheet use this FM.
CALL FUNCTION 'ALSM_EXCEL_TO_INTERNAL_TABLE'
    EXPORTING
      FILENAME                      = P_FILE
      I_BEGIN_COL                   = 1
      I_BEGIN_ROW                   = 1
      I_END_COL                     = 17
      I_END_ROW                     = 3000
    TABLES
      INTERN                        = itab
EXCEPTIONS
INCONSISTENT_PARAMETERS       = 1
UPLOAD_OLE                    = 2
OTHERS                        = 3
It will read the data from excel sheet column wise and then store it in ITAB. you can change the order after reading the file.
In case of Text file use FM GUI_UPLOAD.
You can change the order of the fileds after reading it from file, but the length and all you have to make compatible to SAP standard fields.
Regards,
Sachin

Open Data Set Error while trying to read file from non SAP server

Hi all,
is it possible to read data from non-SAP application Sever?
I'm using OPEN DATASET p_filin FOR INPUT IN LEGACY TEXT MODE CODE PAGE '1504',
Where p_filin is other Windows server.Our applicition server is under Unix.Is it a problem?
I make test to read file from SAP application server and it was ok.So how to call other server?
Thanks!

Hi,
Yes it is possible to read data from a non SAP server through the statement OPEN DATASET.
The important thing to check is that the SAP Server got enough access to the non SAP server so it can perform a reading/writing process depending on your needs.
You should contact your network administrator and BASIS to help you check the permissions. This can be pretty tricky, specially if the servers are in different domains.
Regards,
Gilberto Li

SSO from non-SAP J2EE to NW04 ABAP WebService

Similar Messages

Maybe you are looking for