SSO - integrated ITS - SRM 5(EBP)

Hi all,
I am just wondering if we need Java stack in order to set up Single sign on for SRM/EBP shopping cart (bbpstart).
We are on SRM Server 5.5 with integrated ITS. We don't have Portal. We currently have SSO implemented on all Gui interfaces for all SAP systems via Active directory.
What is the correct documentation for my case?
Thanks a lot and looking forward to hearing from any good instruction,
Kev

Hi,
If your password field is already pre filled with some value due to which you are unable to enter the password then you need to maintain the foll parameers in RZ10:
The foll tasks need to carried out preferably by a BASIS person after which you need to restart the SRM server for changes to be effective:-
1.Select the instance profile in RZ10 and goto Extended maintainence.
2.login/create_sso2_ticket = 2
login/accept_sso2_ticket = 1
Also check if the values for the SRM server are properly maintained in the table TWPURLSVR.
HTH.
BR,
Disha.
Pls reward points for useful answers.

Similar Messages

Integrated ITS on SRM:Login Page Problem

Hello All,
   I am working on SRM 4.0 with Internal ITS.I have done all the required settings for Internal ITS.I am able to get the login page but when I enter the user Id and password of my SRM system,It shows the erroe that "Incorrect SSO configuration on this server ".
   I have checked the transaction RZ11 on SRM Server for the parameter login/accept_sso2_ticket.It is set to value 0.
   Can anyone tell me what extra settings are to be done for the Integrated ITS?Please help.
Thanks & Regards,
Deepti.

Hi Raja,
   I have changed the default language in the system settings for the service BBPSTART as English.Also I have made the following changes for the same service :-
1>Changed the Logon procedure to "Alternative Logon procedure " and in that I have removed "SSO Authentication".
2>In system Logon Configuration,I have changed the default client and language.
3>In service data,I have changed the Basic authentication from Standard r/3 User to "Internet User".
After doing the above changes,I have republished the service.
Now i am getting the Login Page(in language English) but with the message "SSO cannot be used for logon To continue, choose "Logon". A dialog box appears, where you can enter your user and password. This server does not support HTTPS! It is therefore potentially unsafe to send your password ".
After that when I enter the ID and Pwd,I get the same Login screen(USER,PWD,CLIENT,LANGUAGE AND ACCESIBILITY Labels) but this time below there is the message "Inocrrect SSO configuration on this server".
Please tell me the exact changes so that I can login to the homepage.
Also to avoid the Login page,I have tried entering the Login Details in anynomous Logon data,but then I directly get the Homepage with the Menu on the Left hand Side and when I click on any of the items,I get the screen with the following text:-
SSO is not active in system
To continue, choose "Logon". A dialog box appears, where you can enter your user and password.
This server does not support HTTPS! It is therefore potentially unsafe to send your password
Copyright 2002-2004 SAP AG All Rights Reserved
I am not able to understand why the system is prompting me for the SSO settings when I have set the parameters(LOGON_ACCEPT_SSO2_TICKET AND LOGON)_CREATE_SSO2_TICKET to 0).
Please help.
regards,
Deepti.

Stack overflow error when connecting to SRM with integrated ITS

When I try to connect to SRM Server through Integrated ITS, it is giving me the error "Stack overview, giSAPWP is null or not an object. Kindly let me know how to resolve the error.

Hi Arun,
Are you running with Portal ?
If yes, could you confirm the following point :
- portal and ITS of the SRM system run under the same protocol (both under http or https, ELSE it is not possible),
- portal and ITS of the SRM system are in the same domain
Kind regards,
Yann

How to trigger EBP program when used integration ITS?

Hi,Everyone,
    I used integration ITS,and now,i design a pushbutton in screen at ITS,But,how to triggered to EBP Program?
    Who know that.
    Thanks
BestRegards
Andy
Edited by: andy zhou on Jul 25, 2008 10:15 AM

Hi,
for these kinds of issues,
foirst check if a uefull event already exists in the system
for this you first actiave the event trace: SWELS.
Then you change the info record.
And then you read the event log with SWEL.
If there's no event, you may eventually have to create it in an exit with SAP_WAPI_CREATE_EVENT fm
Kind regards, Rob Dielemans

Program not working with Integrated ITS

We are calling program SAPLXUSR at log-on and the program is not carrying out the funtions when being used with the Integrated ITS.
This program works correctly with the Standalone ITS but we are unable to execute it using the Integrated ITS. We are using the standard log-on screen for Integrated ITS without the pop-up log-on box.
Additional Details:
Program Name: SAPLXUSR
Package: SUSR
Function Module: EXIT_SAPLSUSF_001
Function Group: XUSR
Enhancement: SUSR0001
Any suggestions?

Release Information:
SAP_ABA     640     0015     SAPKA64015
SAP_BASIS     640     0015     SAPKB64015
PI_BASIS     2005_1_640     0005     SAPKIPYJ65
ST-PI     003C_640     0001     SAPKITLPS1
SAP_BW     350     0014     SAPKW35014
SRM_SERVER     500     0008     SAPKIBKS08
SRM 4.0
The program is executed when the user logs onto the system. Since the log-on screen has changed with Integrated ITS, this user exit is not envoked. The User exit makes entries in tables that are tied to the User ID that is used on the log-on screen. We've turned off SSO to get our original log-on screen back but now the user exit is not being envoked.

SSO between ITS 620 R/3 and EP

Hi,
I need to use ITS 620 for R/3 4.7 and EP 6.0 for ess/mss implementation
I have to configure SSO between R/3 and EP.
Do I also need to configure SSO between ITS and R/3 , ITS and EP also for this?
If yes can any one tell me the steps in configuring SSO between ITS and R/3, ITS and EP ?
advance thanks,
PK

UPDATE:
I have installed a portal (SAp netweaver 7.0 Java stack) and have connected it to a ECC6.0 SR3 backend and I needed only to configure the SSO between portal and backend abap instance, and all worked fine. There was no need to configure the SSO between the integrated ITS and abap instance.
About the error message mentioned in my previous forum entry:
I did not only do the steps for SSO between portal and backend as described in the blog "Configuring the Business Package for Employee Self-Service (ESS)", but I also did all the additional steps as mentioned in "10 golden rules of SSO".
After that the error message "SSO logon not possible; logon tickets not activated on the server" did not appear anymore. (Instead a screen that asks for username and password always appears with the warning "No switch to HTTPS occurred, so it is not secure to send a password". But I think that's ok.)

SAP HR Org. Structure excluded from integration to SRM

We have not set up the automatic integration of HR org changes into SRM organization (report RBDMIDOC, message type: HRMD_ABA).
In SAP HR some new org units with its positions and employees will be assigned.
We would like to exclude this new part of HR Organization Structure from
integration to SRM. In the transaction BD64 we can filtrer object type,
subtype, infotype and relationship but this is not sufficient for us.
¿How could we exclude from copying to SRM a whole part of the organizatonal tree, for example excluding a root org. unit (one ID) and all its dependets org. units (evaluation path)?
Thank you in advance.
Best regards.

Hi Malgorzata Kaminska,
We had similar kind of requirement which we could acheive with
01) Write a custom program which calls the standard SAP T-code PFAL or (RHALEINI)
02) In the Exit R/3 outbound IDOCs, filter the PERNRs to exclude the list you do not want to. If the list is static, you can maintain in a custom table one time and in the outbound idoc exit, check an entry exists in the table and exclude the PERNRs. If the PERNRs are dynamic, then when the PERNR gets created, write another exit to populate in this custom table for PERNRs exclusion.
03) The custom program of point 01) will pick all the necessary PERNRs for replication and submit in the PFAL as select single.
04) The variant in the PFAL can have an evaluation path as P-S-O and executed under update mode.
Hope this helps!!!
DV

Session does not logoff on integrated ITS 700

We have upgraded from 46C / ITS 620 to ERP2005 (ECC60) and are using the integrated ITS.
When you log off the ITS webgui session, if you leave the browser open and enter the webgui URL once more (http://<host>/sap/bc/gui/sap/its/webgui), the logon screen is bypassed and another person could pick up the original users session.
The ~usertimeout parameter from ITS 620 does not have any effect.
Does anyone know the correct parameter to set to overcome this?

Hello John
There seems to be some sort of SSO involved.
~usertimeout only helps with the original ITS SSO cookie named MYSAPSSO.
With ticket logon ~usertimeout already did not have any effect.
With the Integrated ITS the MYSAPSSO cookie is not available anymore.
In your case the problem is either with the SSO Logon Ticket or with HTTP Basic Authentication. If it is the ticket logon (e.g. via EP) then the user would have to log off from EP to delete the SSO Logon ticket.
If it is the HTTP Basic Authentication then the browser has to be closed as there is no other way to remove the authentication otherwise.
<b>Possible Solution</b>:
You might want to check and change the Logon Procedure in SICF for the webgui service. You should be able to make SAP Authentication the standard:
you find more details at <a href="http://help.sap.com/saphelp_nw04/helpdata/en/e0/73f34026d70b06e10000000a155106/frameset.htm">SAP Online Help</a>
best regards
Gerd

Https configuration on integrated ITS

Hello Gurus,
Can someone, please highlight the steps in enabling https configuration to the backend r/3 system from the integrated its for EP7 - java system. The portal content t is already enabled https.
thanks & regards,
Sankar.

i assume that ICM (internet Communication manager)configuration is done and your concern is only about configuring SSO.
the complete details are given in OSS note number 517860.
there is alos a test BSP application to check whether SSO is configured. and the url for the same is
http://wasserver.xxxx.com:<port>/sap/bc/bsp/sap/system/sso2test.htm?sap-user=<userid>&sap-password=<password>&sap-client=<client>
Hope this helps.
Regards
Raja

Logoff error with Integrated ITS

We are receiving the following error message (on a new web page) when trying to logoff of SRM using the Integrated ITS.
Service Unavailable
The proxy is currently unable to handle the request due to a (possibly) temporary error. Extended error information is:
Failed to forward the request to the web server at sap.corp:1000000. This may be due to a firewall configuration error or a DNS failure.
If this situation persists, please contact your firewall administrator.
Any idea on how to resolve this issue?

Hi Shannon
Check if You have an '~exiturl' parameter provided for this page.
~exiturl should be look like this:
"~exiturl http://<your_host>/scripts/wgate/bbpstart!"
Regards,
Marcin Gajewski

HR Org.Structure Integration with SRM

Experts,
I am working on a SRM 6.0 implementation. My client already have SAP HR setup.
Would you recommend to use the HR Org.Structure integration or to maintain a separate SRM Structure? If you have any experience with HR integration I would really appreciate a brief pros and cons.
Thanks in advance,
Mark

Hello all.
This is very old post but I need related info for HR integration with SRM.
I am an HR guy and our SRM team wants us to suggest an attribute they could tie to Spending limit on purchase order but have not came up with any.
Any of you have done this before? Normally - how does spending limit tied to person for purchase order?
They also wants the cost directed for Cost center and its a FI object not HR and we don't maintain owership relationship on this, Any idea's if how we can achieve this?
All responses and/or some documents are greatly appreciated.
Thanks
Jay

Integration between SRM and ERP in part of Business Partners

Hi all
Could we make integration between SRM and ERP in part of Business Partners if we use Standalone Scenario? Thanks

Hi
Any scenario, You have EBP system as well as you said you have ERP system too. so you can do BBPGETVD and pull the vendor records. Normally standalone system may not have ERP system. In standalone Your account payable system integrated with your EBP system.
If you want to create a vendors locally in SRM you can create local vendors via web BBPMAININT or BP in GUI.
regards
Muthu
Edited by: Muthuraman Govindasamy on Sep 10, 2008 9:14 AM

Integrated ITS 6.40 - Connect to SAP R/3 4.6 C

Hi,
here first the tecnical details as required :
SAP-BW 3.5 SP 15
SAP R/3 46C
Web browser IE 6
Integrated ITS release 6.40 Kernel patch level 105
I am trying to establish the ITS connection in order to be able to jump from Web reports to a specific CO transaction in SAP R/3. Given my poor technical knowledge, it is not working but I have already made the following check and settings.
- in SICF, I have activated the service 'WEbgui' following the path SAP/BC/GUI/SAP/ITS.
- I have made sure in the profile of the instance that both parameters 'itsp/enable' & 'em/global_area_MB' were properly maintained.
But it is unclear to me how to maintain the entry in table TWPURLSVR. What I have done so far is the following :
- logical system corresponding to the target client in SAP R/3
- Web server of the BW instance /sap/bc/gui/sap/its/webgui
- Web protocol : HTTP
- GUI start server of the target client in SAP R/3
When trying to make the jump from a Web report, I get the following error message stating :"http://host:port/scripts/wgate/webgui/! call was terminated because corresponding service not available."
Any help would be appreciated (and rewarded)
Thx
Stéphane Beguin

you can call a transaction of BW system using the integrated ITS.
for ex. for Txn SE38 it will be
http://host.domain.com:port/sap/bc/gui/sap/its/webgui/!?~transaction=se38
but from BW system's integrated ITS you cannot call a transaction of your R/3 system (which is on 4.6C)
if you want to call a transaction of R/3 system from your BW query you have to have a standalone ITS installed. (yes separate server).
also check out this link.
http://help.sap.com/saphelp_nw04/helpdata/en/4f/2e6a52c3cdc44d83169b181a9c62ba/frameset.htm
Regards
Raja

Log off problem in integrated ITS

Hi,
our cancel button for ending the application with an external ITS works fine and the exitURL which is deposit in the service file will be shown.
But with an integrated ITS it doesn't work. I know that this exitURL doesn't work in an integrated ITS.
So I left a redirect URL in the SICF > ErrorPages > Log Off Page > Redirected URL
but nothing happens after clicking the cancel button. The browser works and works but the old screen is still seen. What's wrong? Why the page will not be redirected to given Url?
Can anybody help me?
This works:
wgateURL(~command="logoff", ~exitURL="http://www.sap.com")
but we need a standard exit like described above and I think the way above should be right.
Thanks, Susanne

This was discussed recently.
check out this thread
Close the IE page on click of a button in the transaction
Regards
Raja

HTML Templates in integrated ITS

Hi,
I am using certain ITS services in integrated ITS. However, their look and feel is like WebGUI. For two of the services, there are HTML templates defined but still their look and feel is like WebGUI. If I do not definr ~GENERATEDYNPRO = 1, then I get an internal error. If I use this parameter, then the look and feel is SAP like.
Any pointers?
Thank you.
Abhijeet.

Hi abhijeet,
Set by Service file
~ generateDynpro = 0 -Automatic screen generation
                      disabled.
                   1 -Automatic screen generation
                      enabled.
can you re-publish service again on your ITS and re-start ITS server and test this.
Please share the result.
Thnx,
Suriya.

SSO - integrated ITS - SRM 5(EBP)

Similar Messages

Maybe you are looking for