SSO from non-SAP to SAP apps

Hi All,
Currently We have SAP applications, non-SAP applications(java, .NET, PHP etc) in our landscape.
If the client tries to access any non-SAP application it should ask for authentication and thereby for any subsequent access to any URL's(SAP or NON-SAP apps) it should not ask for any authentication.
FYI:
The client logins into SAP Portal(SAP to NON-SAP) first and thereby able to achieve SSO for non-SAP applications as well.
Currently we are stuck for the scanerio of Non-SAP to SAP apps ?
Please suggest.......
Thanks,
Mano.

Hi samuli,
Using SPNEGO, we can incorporate windows authentication for SAP Portal ( after desktop authentication user can logon without userid/password). But for non-sap apps this would be challenge.
I have another option, using webdispatcher if we enable server redirect for all applications(SAP & NON-SAP) and get authenticated centrally by which SSO can be achieved across all the apps.
Would above solution work ?
Thanks,
Mano.

Similar Messages

SSO from Non-SAP portal to EP

Hi.
We need SSO from Non-SAP portal to EP.
The Non-SAP Portal has publish Form-based authentification.
I mean userid&password set to URL.
Then the EP can generate SAP Logon ticket to backend system?
regards,

How to Enable Single Sign-on with Non-SAP Web Application
I have very good material coollected for the same implement this.
http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a7b5ba90-0201-0010-4dbc-8f999dcd2798
Cheers!!
SJ.

SSO from Microsoft ISA to SAP enterprise Portal

Hi Gurus,
Our vendors access the Internal network using MS-ISA as proxy.The first point of authentication is MS-ISA where the Vendor needs to give his User id and Password.After that he hits the Internal Portal and is prompted for a Login again.Is there a way to set up SSO from MS-ISA to SAP EP7.0 so that there is no need for second Logon.
Thanks in Advance!

The easiest, and common way to solve this, l but not the only way is to use ISA as a proxy and use the fact that the ID of the authenticated user can be stored in an http header variable (e.g. REMOTE_USER). This HTTP header variable can then be used by the back-end SAP system (internal portal) to authenticate the user and issue an SSO2 ticket so that the authentication only needs to occur first time they access a page on the SAP system.
The use of HTTP Header variables in SAP J2ee engine is widely documented on SDN and in SAP help library.
Thanks,
Tim

SSO from non-SAP application to EP system

Hi all,
Is it possible to configure the Single sign-on from non-SAP application to SAP Enterprise portal?
My requirement is
I have a link to "Enterprise Portal" in my company's website home page. If I click on the link, it should directs to EP portal with out asking for logon.
Please suggest, is it possible??
Regards,
Sujoy

Hi Sujoy,
SSO implementation to non-browser applications i.e non-SAP systems is possible in 3 ways which are listed .Can find useful info in the below links.
http://help.sap.com/saphelp_nw70/helpdata/EN/12/9f244183bb8639e10000000a1550b0/frameset.htm
among the non-browser applciation if it is an MS dotnet system then the below article will give a clear understanding of SSO implementation.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f05ae0f0-bf93-2b10-ed9e-a7320c012841
Regards
Supraja

SSO from non-SAP J2EE to NW04 ABAP WebService

Hello,
I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
I must stress that username/password is not a solution.
Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
Best regards,
Thomas Mouritsen

>
Thomas Mouritsen wrote:
> Hello,
>
> I currently have issues establishing SSO from a J2EE (which is NOT a NetWeaver system) server to a WebService that resides on a AS ABAP 6.40. When I look over the options I see no obvious SSO solution. I cannot be the only one in this situation. Which solution have you managed to implement.
>
> I must stress that username/password is not a solution.
>
> Withouth really understanding the different scenarios, I would prefer to make som sort of trust relation. And then just let the calling application supply the username in a header variable
>
> Best regards,
> Thomas Mouritsen
Well, the best solution would be using message-based authentication (WS-Security) - either "X.509 Token" (digitally signed message) or "SAML (1.1) Token". Unfortenately you are using an older ABAP system where this feature is not available.
Especially regarding Web Services it is definetly worth to consider upgrading to NWAS 7.0 Enhancement Pack 1 (or at least: NWAS 7.0 with SP14 or higher).
But it also depends on the capabilities of "your" J2EE server. Does it support WS-Security and SAML Tokens? Can it servce as SAML Source Site?
Transport-level security (e.g. SSL with X.509 client certificates) will not help in your scenario (system-to-system calls). It would only be an option if the WS Consumer is an User Agent (-> SSL client represents a single user); only then X.509 client certificates can be used for SSO.
Best regards, Wolfgang

SSO from Microsoft wabsite to SAP Portal

Hi
My client wants SSO from .net based Microsoft website to SAP Portals. Requirement is that when customer enters the website e.g. www.mysite.com , he will be automatically gain access (SSO) to SAP Portal .
How it can be done ?
Please help
Thanks in advance

Hi Ananda,
This link answers your query.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/interoperability/dotnet/_web%20services%20and%20a2a%20interoperability%20center/sample%20application%3a%20sso%20with%20a%20.net-based%20web%20service%20client%20using%20sap%20logon%20tickets.pdf
Reward points if handy!
Regards,
Sandeep Tudumu

SSO from non sap application server to SAP systems

Mysapsso2 cookie has been generated after we are login into the portal https://FQDN/irj/portal for all the backend systems in client browser. Since it is working fine. After login into the portal , while clicking the URL iview of external JBoss application sever in portal home page and it is shows the new windows pop up login page. After login into this external JBoss application server, we have configured work item for SAP ITS WEBGUI login page of the backend system inside this JBoss appliaction. Here we need to pass the mysapsso2 cookie information in SAP WEBGUI, so that login page is bypassed using SSO. Kindly do give some suggestion for fixing this issue. Kind Regards, R Rajavelu

Try to use it Appsintegrator to access the non sap application from SAP Application

SSO from non-SAP (Webspher AS) to SAP (EP)

Hi,
We need to connect in SSO an WebSphere Application Server with SAP EP.
In practice our users will log on Corporate Portal, go to a section in which there will be a link to SAP EP (in particular access to the functionality ESS and MSS).
How do I implement a SSO for my scenario?
All the documentation I found is from SAP EP to a non-SAP application and not vice versa.
Best Regards.
Diego.

>
Diego Garofalo wrote:
> Hi,
> We need to connect in SSO an WebSphere Application Server with SAP EP.
> In practice our users will log on Corporate Portal, go to a section in which there will be a link to SAP EP (in particular access to the functionality ESS and MSS).
> How do I implement a SSO for my scenario?
> All the documentation I found is from SAP EP to a non-SAP application and not vice versa.
>
> Best Regards.
>
> Diego.
Question: which kind of authentication mechanism is used when the users will log on Corporate Portal ?
It might be a smart idea to use the same authentication mechanism also for SAP EP.
Well, if not only SSO (Single Sign-On) but also SLO (Single Log-Off) is demanded, then you should focus on SAML 2.0 - provided that all parties do support it. NetWeaver will support SAML 2.0 with a future release, so this is only an outlook for you by now.

SSO from non SAP to SAP

Hi,
i have a requirement where the client has a web application i guess Cold fusion application .The user authenticates at the client web application level. After authenticating and clicking on portal link which is inside the client application he should be directly entering portal without any authentication.
I was thinking of JAAS login module is it possible
Thanks
Sushanth

Hello Sushanth,
Create a component in your cold fusion application wherein a user can at one time enter his portal username and password and store it in a table or so.
Now, the link which you have that redirect you to the SAP Netweaver Portal should have a target: http://<host>:<port>/irj/portal?j_user=<get ur mapped portal user here>&j_password=<get your mapped portal password here>.
This combined URL will open the portal without authentication.
Hope this helps.
If it did kindly consider rewarding points.
Regards,
Prem
SAP

Weather Career Change is advisable from Non IT to SAP after 10 years of experience in Construction Industry

Hi,
I have 10 years of experience in construction industry.My area of expertise is in project management.I before 5 years I have a strong desire to work in IT industry. But not able to get a chance.But I need a career profile change to IT industry. So I choose to do SAp ps leaning *** certification from authorised training partner. module.please suggest
1. whether this is advisable.
2. Whether I need to resign from my current job.
3. What salary I can expect from SAP job profile, as my current salary is 7 to 8 lacs.
4. Whether I will get a job immediately after certification.
5. Howmuch SAP PS certification Job requirement in market.
Please advise.
Thanks,
Priyadarshan

Hi Sama,
Kindly go through below link and all you questions will be answered.
Career Center
Regards
D.Singh

SSO from Web Application to EP

Hi,
We have a requirement where we have to provide SSO from some web application to Portal (EP6 SP15).
This web application will be having link to portal on its pages.
User store for Web Application and Portal is different.
This Web Application can be accessed from Internet.
We have not yet decided about accessing Portal from internet.
Is there any solution to this? Is this doable??
I have looked at thread
SSO from .Net application to SAP Portal
can anyone provide more information??
Thanks in advance

Hi Santosh,
there is not much to explain. It your web app side, you must have some matching table between webAppUser and the portal users and their passwords, like:
webAppUser1 portalUserA xy56123
webAppUser2 portalUserB g6324s3
Your own "integration" checks which user is logged on, takes the portal user name and password and calls the portal with the parameters "j_user" and "j_password" (and "login_submit=true"); for example via the client and a form where these values are put in and the target is requested per POST. And that's it. For the form (including the pwd) would be send to the client from your webApp server, you definitely should use https at least, as already stated.
Hope it helps
Detlev

Web Server Filter Based SSO to Non-SAP Apps

Hi,
I am following SAP Note 442401 for configuring the Non-SAP App for Web Server Filter based SSO using SAP Logon Ticket. Also, I have downloaded the 5_0_2_8.zip file.
The Readme doc of this zip file says:
"<b>Changes in Web server filter plugins
The Web server filter plug ins and the Ticket Toolkit now were separated.
See subdirectories for further information:
"C" the Ticket Toolkit
"filter" the Web server filter plug ins
This is the last released version (5.0.2.8) on SAPSERV.
Pleaser refer for newer versions to SAP Service Marketplace (http://service.sap.com/patches)
Technology Components-> SAP SSOEXT -> SAP SSOEXT</b>"
Zip file has two folders named "C" and "filter".
"C" folder has cpp code to varify the ticket.
"Filter" folder has DLLs for the different web servers.
So far so good . Now, what I want to know is that is placing the DLL from the Filter folder onto the respective web server and doing some configs, as per the PDF provided with ZIP file, enough?
Or do I need to do anything else, like writing any class to read and validate the Ticket?
Thanks,
Vivek

See Web Server Filter Based SSO to Non-SAP Apps

SSO from SAPJ2EE to Non-SAP Java Applications

Hello,
does anybody know, if there is a newer version of MySapSsoSupport-0.5.tar.gz
This enables Single Sign-On from SAP J2EE Engine/EP to Non-SAP Java Applications.
Thanks in advance.
Guenter

Hi Guenther
I am not aware of this MySapSsoSupport package. As far as I am aware the only supported scenarios for SSO to non-SAP Systems are listed here:
http://help.sap.com/saphelp_nwpi71/helpdata/de/12/9f244183bb8639e10000000a1550b0/content.htm

Configure sso to non sap

dear all,
i would like implement sso from ep to other web application ( non SAP )
the legacy system is using " PHP and Web Server APACHE "
there any want can help me how to configure the sso and how to create iview for my legacy system ( using URL iView or application integrator )
thanks for your help
echo

Hi Echo,
Single Sign On to non-SAP applications normally can't be done by configuration.
How SSO can be done depends on your application.
Maybe these few hints may help you:
You need the same usernames in portal and in your external application
You may integrate your app using an application integration iView
If your external application can be run in some kind of 'trusted' mode (this means, no password, just the username is required to log on as long as the request comes from certain IP adresses / your portal server) you can just pass the userid using the app integrator iView mechanism
SAP provides a library (currently written in C, but there is at least a java wrapper available) to decode the SAP SSO Ticket
You may extend your external applications logon mechanism to use the mentioned SSO ticket and do the login without password. Application Integrator is able to send the SSO ticket to your external app.
In less words: you need to do some coding on your external application
Hope this helps (or come back for more),
Carsten

Sso to non sap systems

HI,
I am trying to setup SSO from our portal to plumtree portal. could some one please let me the steps for setting up the SSO.
Thanks

Hi Yogi,
Please check this link.
<a href="http://help.sap.com/saphelp_nw04s/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm">Single Sign-On to Non-SAP Systems and Applications</a>
Regards,
Siva
P.S: Award points if you find this useful.

SSO from non-SAP to SAP apps

Similar Messages

Maybe you are looking for