SSO (SNC) for BEx applications

In our testing environment, we use SSO(SNC) through the SAP GUI for Windows to access our backend systems:
*SSO file gx64ntlm on the server side
*SSO file sncgss32.dll on the client side
*User mapping (SNC tab) mapped to active directory user
and everything works fine.
However, when launch BEx Analyzer, Query Designer, etc, we get the following error when accessing the SSO logon options in the SAP Logon Control tool:
Error Group
RFC_ERROR_PROGRAM
Message
Missing SNC_LIB=... in connect_param in RfcOpenEx
How does the logon control need to be configured in order to connect to the backend system via SSO?

Almost there....AFter that setting, I get the following:
Error Group
RFC_ERROR_COMMUNICATION
Message
SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed
Connect_PM GWHOST=xxx.xx.x.xxx, GWSERV=sapgw00s, SYSNR=00
LOCATION    CPIC (TCP/IP) on local host
ERROR       partner xxx.xx.x.xxx:4800' not reached
TIME        Thu Jan 15 14:42:56 2009
RELEASE     710
COMPONENT   NI (network interface)
VERSION     39
RC          -10
MODULE      nixxi.cpp
LINE        3139
DETAIL      NiPConnect2: xxx.xx.x.xxx:4800
SYSTEM CALL connect
ERRNO       10061
ERRNO TEXT WSAECONNREFUSED: Connection refused
COUNTER     2
SNC is set to accept insecure RFC (value =1)...

Similar Messages

How to create sso login for webcenter application

Hi,
i have created a webcenter portal application with a login page.i have to create a sso login for that application .
can anyone suggest me how to do?

Hi.
Do you have OAM as SSO?.
The best way is to create a loginProxy page which proxies the user and password entered to OAM Login process (or the other SSO system).
This post of JayJay will help you: http://jjzheng.blogspot.com/2013/10/non-programmatic-authentication-using.html
Regards.

SSO Configuration for HWC applications

How to Configure SSO for HWC applications? we are configuring HTTP Authentication in SCC for Single SignOn but not been successful. Debugging the issue we found that MYSAPSSO2 cookie is not being returned.and SSO is not configured in SAP .
How to enable SSO in HWC apps.
What are the Other options to ask password in HWC apps( adding additional Security Layers)

Kunal raman
You/BASIS admin can check in that particular SAP system.
Go to Transacation RZ10
Select Instance Profile as shown in the below diagram
3
3 .Click on Display
4. Then you can see parameter name and its value as below
Rgrds,
Jitendra

How to go for BEx application iView

Hi Gurus
       I am new in portal since last 2-3 months. Now my project requirment is to work with Functional BW and SCM consultant.
       Functional consultant creating Queries in "Query Designer" and They are viewing or executing through "Bex analyzer" in excel **** form.Now they want this to be display in Portal. Some of them advised to use "Web Application Designer".
My Q:
1.      Is Web application is mandatory step in between ?
2.      Without using Web Appln designer can we create iviews ?
3.      What is exact steps i must follow after getting query ?
4.      If I need to create Bex application iVeiw for that we need to give "Query string, from where we can get that Query Designer or Web appln Desginer ?

Web Application Designer is not mandatory to display bex reports in portal
u can create Iviews without web application designer
Goto portal --
Creating an BEx iView:
1.Right-click on the iViews folder, and choose New → iView. The iView Wizard displays.
2.Select iView template create an iView from an existing iView template radio button.
3.Choose Next.
4.In the iView Wizard, select BEx Web Application iView radio button.
5.Choose Next.
6.Enter a name, iView ID and iView ID Prefix.
7.Choose Next.
8.Choose SAP BW2.x/3.x radio button from Version.
9.Choose Next.
10.Select the SAP BW system alias SAP_BW and in the BEx Web Application Query String, For Eg : &INFOCUBE=0SD_C04&QUERY=0SD_C04_Q0001
11.Choose Next.
12.Select the Open for editing when Wizard completes check box.
13.Choose Finish.
14.In the Property Category drop list, choose Appearance Size.
15.Make modifications to the Attributes by changing Height Type to FULL_PAGE.

Missing selection screen for Bex Application iView

Hi,
I have configured a Bex Application iView, for which I am able to see the selection screen in preview but when I attach this to workset and try to open it in portal, the report is displayed directly with out selection screen.
Here are the steps I did
1. Created Bex Application iView with provied query string.
2. Assigned this iView to Page.
3. Attached this page to workset and then to role.
4. Login to the portal for respective user to see the report.
5. When I click on the link for the report, the selection screen is bypassed and the report is displayed directly.
Note: I was able to see the selection screen in preview for both Page and iView.
Could anyone through light on this problem.
Regards,
Ravi.

Frank,
Any chance that somehow that user has set personalisation on all the variable values?
Regards
Gill

SSO for External application not part of the portal framework

Greetings,
I am desperate!!!
I am trying to do the following:
I have a pl/sql application that presents to the user a set of external applications links.When the user activates a link, I would like to make a call the SSO server so it can do external application login.
I know I can configure the external applications as described in the SSO admin guide.
Unfortunately the API to query the SSO server for external application mapping is not public.
ANY IDEAS ON WHERE I CAN GET THIS INFO??
Every thing I have read says that external applications can be accessed through Portal. This is not my case. I can use any packages or classes available by the SSO server to portal, but MY APPLICATION IS NOT A PORTAL.

I have similar kind of requirements for Single sign-on to external web applications.
But in my applications I have to auto-generate random userid & password for different external web applications.
These uids & password are exported to external applications, which upon recieving creates user in their applications.
So, actual user will never have access to these credentials(uid &pwd).
So, how can I cutomize the Portlets to do the first time SSO when user is created & their credentials to external apps are stored to OID.
Any idea Barry..
Bye

SSO for partner applications

Hi All,
I have installed 10g AS Release 2 on a system. I also have Application Express(formerly HTML DB) installed on the same system. I registered one of the HTML DB applications as partner applications and have put SSO authentication for it.
When I try to login the AS looks at the OID installed on the system(which I gave during installation). I want it to look at the Oracle gmldap.oraclecorp.com server OID so that only Oracle employees login.
Can anybody tell me how to change the OID and what are the entries to be give to configure it to gmldap.oraclecorp.com server??
Thanks,
Swaroop

See Task 3 in the Section 9.4 of the Oracle Application Server Administrator's Guide:
http://download-west.oracle.com/docs/cd/B14099_17/core.1012/b13995/chginfra.htm#i1014978
See the following for information about what to specify on each page.
http://download-west.oracle.com/docs/cd/B14099_17/core.1012/b13995/reconfig.htm#i1013341

SSO requires double login for partner application

I'm having some trouble with SSO partner applications, when I login to a SSO protected application, the login works fine, but when I try to navigate to another application I'm presented with the login page again, the sso cookie seems to be working since clicking on the login button without entering the user credentials works. For example, I log in to portal and from there I navigate to a forms application that is on the same server and the same port (portal: https://apps.mydomain.com:4444/pls/portal --> forms: https://apps.mydomain.com/forms/frmservlet?config=app) I am presented with the login page and after clicking on the login button without entering any information everything works fine. This is happening for all the middle tiers that are connected to the same OID. Any ideas on what can be wrong on my configuration?

Hi Andrey,
The problem sounds really wierd.
Can you check your SSO settings for your Portal ECC system? I mean, please check the User Management/Administration properties in your System Adminstration of Portal System that points to ECC.
Regards
<i><b>Raja Sekhar</b></i>

SSO userid for a partner application

Hi,
We have one application deployed on WebLogic Application Server this is registred as Partner application over SSO server.
On application side we have installed Oracle HTTP Server as webserver and configured mod_osso.
Now when user attempt to access any secured page SSO askes for the authentication. And on successful login user landed back to application page configured while creating Partner application.
After login we need userid of user who logged in on sso server. I have tried following and getting null.
Remote User: <%=request.getRemoteUser() %>,
     Proxy-Remote-User: <%=request.getHeader("Proxy-Remote-User") %>
     Osso-User-Dn: <%=request.getHeader("Osso-User-Dn") %>
     Osso-User-Guid: <%=request.getHeader("Osso-User-Guid") %>
     Osso-Subscriber: <%=request.getHeader("Osso-Subscriber") %>
     Osso-Subscriber-Dn: <%=request.getHeader("Osso-Subscriber-Dn") %>
     Osso-Subscriber-Guid: <%=request.getHeader("Osso-Subscriber-Guid") %>
     Accept-Language: <%=request.getHeader("Accept-Language") %>
output:
Remote User: null,
Proxy-Remote-User: null
Osso-User-Dn: null
Osso-User-Guid: null
Osso-Subscriber: null
Osso-Subscriber-Dn: null
Osso-Subscriber-Guid: null
Accept-Language: en-us,en;q=0.5
Is any one there knows, what exactly i should do?
Thanks & Regards,
Kevin Chheda

So the user has successfully authenticated and can access protected areas of the application?
Have you tried using Http headers to see values/attribute names?
Can you try this:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body>
<%@ page import = "java.util.*" %>
<h1>Headers received:</h1>
Remote user header is: <% out.println(request.getRemoteUser()); %>
<p>
<table>
<%
Enumeration headerNames = request.getHeaderNames();
while(headerNames.hasMoreElements()) {
String headerName = (String)headerNames.nextElement();
out.println("<tr><td>" + headerName);
out.println(" <td>" + request.getHeader(headerName));
%>
</table>
</body></html>

SSO Authentication for more than one application in Application Express

Hello,
I recently got a single application working with SSO integration for Application Express 2.2.
Now I would like to create multiple applications within the same workspace, which all use SSO authentication. I tried both copying the working one from the other application and creating a new SSO authentication scheme from scratch into the new aplication.
I cant seem to make the new application work with SSO authentication. Do I have to go through all of the same steps I went through to get it working with the first application?
Thanks
-sean

Ok, my bad.
After shutting down my web browser and reopening it, the SSO integration now works for both the old and new applications. Not sure what was cached, but it was bypassing the sso check.

SSO for external applications

Hi,
We are using SSO to integrate with external applications. There is a need to open the third party application from eBusiness Center when we click on a button. Can anyone guide me how SSO invokes the external application when you click on any link for the same. I need to invoke the URL same way from the button click as well.
Thanks,
Viral

Hi,
Can anybody help regarding the same?
Thanks,
Viral

Implementing OAM - SSO for Multiple Applications

I am trying to implement OAM - SSO for 2 applications. I already have completed the setup of SSO for one application . OID -- OAM -- OHS ( 11g webgate ) - Weblogic Server - OBIEE . ( All the components are 11.1.1.5 version ).
Now I am looking to add a 2nd application ( OBIEE 11.1.1.6.5 version ) into the mix. So should I install a separate OHS and webgate for the new application or can I use the existing OHS to add another application.
Any tips on this would be helpful please.
Thanks

You may use the same OHS server in reverse proxy to the two applications and configure corresponding policies in OAM console.
Let us know if you get into any issues.

Does SSO2 provide SSO Support for SAP BOBI 4.x Applications?

I could not find any referrence in SAP BI BI 4.x documentation for SSO where this SSO2 would be mentioned!
- Wobi

Hi,
Does SSO2 provide SSO Support for SAP BOBI 4.x Applications?
BOBJ == SAP BusinessObjects Business Intelligence platform?
SSO2 == SAP Single Sign-On?
If yes, BusinessObjects Business Intelligence platform delivers historically its own basis SSO based on Kerberos (but only for applications running on BOBJ platform). I recommend to use it if it fits to your requirements. If not, you can configure "Trusted Authentication". In this case BOBJ trusts the authentication of the web applications server. Here you can use SAP Single Sign-On with SAML or certificates.
Regards
Matthias

BO SSO (SNC) is not working in InfoView

Hi Gurus,
We are facing a very strange scenario in our Production environment.
The BO SSO (SNC) is working fine in Dev and QA. The problem is in Production (clustered environment).
The details are following:
The SIA is running in 3 different servers (for load balance): Server1 (our CORE server), Server2, and Server3
CMS is running only in Server1, it has been stopped in Server2 and Server3.
Also we have 4 WebI Processing Servers in each server (4 x 3 = 12). Like below:
Server1.WebI Processing Server
Server1.WebI Processing Server1
Server2.WebI Processing Server
Server2.WebI Processing Server1
Server3.WebI Processing Server
Server3.WebI Processing Server1
The TOMCAT is running in a separate server (Server4). It is pointing to Server1 since CMS is in Server1.
SNC configuration steps are following:
1. Generated BO certificate (BO.crt) in all three BO servers. Ie., BO.crt is available in all 3 servers.
2. Imported the BO certificate in SAP. Then generated SAP certificate (SAP.crt).
3. Imported the SAP certificate in all 3 BO servers.
4. Provided SSO credential for domain user in all 3 servers. [Domain user is same in all 3 servers]
5. In CMC  SAP filled the Entitlement system, SNC, Options.
6. Imported the SAP users.
7. Aliased the WindowsAD users to SAP Roles.
Scenario 1:
1. Logged in to Designer via SAP Authentication with user id USER1. Created a new test universe (Universe1) with option u2018Use single sign-on...u2019
Universe is working fine. Exported it to repository.
2. Logged into InfoView via WindowsAD with user id USER1.
Created a test report (Report1) from the SSO universe. Report is working fine.
Saved the report into the public folder.
3. Logged into InfoView via WindowsAD with user id USER2.
Refreshed the saved report. But itu2019s throwing the error message u201CUnable to connect to SAP BW server Incomplete logon datau201D
Created a new report from the SSO universe, but same above error message.
Scenario 2:
1. Logged in to Designer via SAP Authentication with user id USER2. Created a new test universe (Universe2) with option u2018Use single sign-on...u2019
Universe is working fine. Exported to repository.
2. Logged into InfoView via WindowsAD with user id USER2.
Created a test report (Report2) from the SSO universe. Report is working fine.
Saved the report in the public folder.
3. Logged into InfoView via WindowsAD with user id USER1.
Refreshed the saved report. But it is throwing error message u201CUnable to logon to BW logon data imcompleteu201D
Created a new report from the SSO Universe, but same above error message.
Note:
- I donu2019t have Xcelsius in my machine. BOE and Integration kit both are in same version (XI 3.1 sp3).
- We used IP address as Application server in CMC SAP and Universe Connection Parameter.
Sofa log detail is following:
Wed Jun 08 01:51:31.414 ThreadID<7180> SAPMODULE : Calling m_pRfcWrapper->RfcOpenEx() ...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : RfcOpenEx(...) returned 0
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Unable to connect to SAP BW server connection closed without message (CM_NO_DATA_RECEIVED)Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Call to m_pRfcWrapper->RfcOpenEx() took 0.047 seconds
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Unable to authenticate using SNC because the URI does not meet the minimum connection requirements.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Warning: SNC was enable and failed. The authentication process is falling back to secondary Credentials...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Determining if we can connect using SSO. Calling CanAuthenticate...
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Authentication model for SAP connectivity is SSO
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : Serialized session exists, try deserializing it.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : The SAP SSO authentication process will fail because the SAP secondary credential are not properly updated and the password is blank.
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : SAPSSOAuthenticationService::~SAPSSOAuthenticationService
Wed Jun 08 01:51:31.461 ThreadID<7180> SAPMODULE : SAPSNCAuthenticationService::~SAPSNCAuthenticationService
Why it is behaving like that?
Thanks for your help.
regards,
Kiruba v.r.

Hi,
Server side trust configuration is well documented as part of the installation guide for the SAP Integration Kit.
Server side trust does NOT require a SNC user on the entitlement system page.
Ingo

SSO to Form Based Application

Has Access Manager yet added the ability to do "form memory" for easy SSO integration to applications performing form based authentication. This is a feature found in products such as Netegrity Siteminder and CA's stuff.
This is easier for legacy applications with closed code than trying to modify the login sequences for these applications.
Z

Hello Romano,
thank you for assisting so much.
Yes, the text itself is always new, but when i believe what it is saying, the content following is not new.
Or do i only mis-interpret the meaning of that text ? Does it perhaps analogously mean: "He User, the content you see was just fresh constructed and cached in the ApplicationCache and then sent to you" or .
I also found the "com.sap.portal.httpconnectivity.urlfetcherservice" and played with it, but with that i achieve cache settings for all applications used and not for only the one i would like it for.
I posted this also in category "Portal Content Development",
URL iview Cache -> How can i empty the ApplicationCache
and there are also interesting answers.
Kind regards
Andreas

SSO (SNC) for BEx applications

Similar Messages

Maybe you are looking for