SSO to R/3 using a reference system

Hi,
I try to setup SSO between a EP6 SP2 and a R/3 4.7. I configured the backendsystem correctly because SSO works if the users have the same user id (tried it using WinGUI). In my case the user ids between ActiveDirectory and SAP differ, so I have to use a reference system. I configured it in the UME settings and now my users can personalize their user ids, but when they click on save an error message appears that a problem occured. In the log file it says:
Sep 7, 2005 5:36:20 PM # Client_Thread_10     Fatal           Exception ID:05:36_07/09/05_0002
com.sapportals.portal.prt.runtime.PortalRuntimeException: PortalRuntimeException
     at com.sapportals.portal.prt.core.PortalRequestManager.handleRequestException(PortalRequestManager.java:824)
     at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:716)
     at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:229)
     at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:555)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:415)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.inqmy.services.servlets_jsp.server.InvokerServlet.service(InvokerServlet.java:126)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.inqmy.services.servlets_jsp.server.RunServlet.runSerlvet(RunServlet.java:149)
     at com.inqmy.services.servlets_jsp.server.ServletsAndJspImpl.startServlet(ServletsAndJspImpl.java:833)
     at com.inqmy.services.httpserver.server.RequestAnalizer.checkFilename(RequestAnalizer.java:672)
     at com.inqmy.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:314)
     at com.inqmy.services.httpserver.server.Response.handle(Response.java:173)
     at com.inqmy.services.httpserver.server.HttpServerFrame.request(HttpServerFrame.java:1288)
     at com.inqmy.core.service.context.container.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:36)
     at com.inqmy.core.cluster.impl5.ParserRunner.run(ParserRunner.java:55)
     at com.inqmy.core.thread.impl0.ActionObject.run(ActionObject.java:46)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.inqmy.core.thread.impl0.SingleThread.run(SingleThread.java:148)
Caused by: java.lang.NoClassDefFoundError
     at com.sapportals.portal.prt.component.usermanagement.UserMappingDataModel.checkR3ReferenceIdentity(UserMappingDataModel.java:621)
     at com.sapportals.portal.prt.component.usermanagement.UserMappingDataModel.saveLogonData(UserMappingDataModel.java:475)
     at com.sapportals.portal.prt.component.usermanagement.UserMappingComponent.doHandleHTMLBEventSave(UserMappingComponent.java:144)
     at com.sapportals.portal.prt.component.usermanagement.UserMappingComponent.doRequestEvent(UserMappingComponent.java:338)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.handleRequestEvent(AbstractPortalComponent.java:720)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.handleEvent(AbstractPortalComponent.java:412)
     at com.sapportals.portal.prt.pom.ComponentNode.handleEvent(ComponentNode.java:250)
     at com.sapportals.portal.prt.pom.PortalNode.fireEventOnNode(PortalNode.java:334)
     at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:628)
     at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:229)
     at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:555)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:415)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.inqmy.services.servlets_jsp.server.InvokerServlet.service(InvokerServlet.java:126)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.inqmy.services.servlets_jsp.server.RunServlet.runSerlvet(RunServlet.java:149)
     at com.inqmy.services.servlets_jsp.server.ServletsAndJspImpl.startServlet(ServletsAndJspImpl.java:833)
     at com.inqmy.services.httpserver.server.RequestAnalizer.checkFilename(RequestAnalizer.java:672)
     at com.inqmy.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:314)
     at com.inqmy.services.httpserver.server.Response.handle(Response.java:173)
     at com.inqmy.services.httpserver.server.HttpServerFrame.request(HttpServerFrame.java:1288)
     at com.inqmy.core.service.context.container.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:36)
     at com.inqmy.core.cluster.impl5.ParserRunner.run(ParserRunner.java:55)
     at com.inqmy.core.thread.impl0.ActionObject.run(ActionObject.java:46)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.inqmy.core.thread.impl0.SingleThread.run(SingleThread.java:148)
Any idea what went wrong?
Bye,
Christoph

solved it: SAPJCO was not included in the Windows Environment Path Variable. I included D:\usr\sap\yyyy\j2ee\j2ee_00\os_libs;D:\usr\sap\yyyy\j2ee\j2ee_00\cluster\server\additional-lib
Bye
Christoph

Similar Messages

Problems with creating reference system and user mapping in EP

Hi@all,
we have deployed Support Package Stack 25 in our portal. After that, the UWLJWF Administration was not available anymore. We get Portal Runtime Error. We habe resolved this error!
In the UME Administration in the System Administration --> System Configuration --> UME Configuration --> User Mapping tab
there was a message saying that CTS was non-existent. I changed the Reference System to (No reference system) and the UWL Admin page is working now!
But now, the SSO to our 3rd Party System is not possible anymore!
I have created an new system alias but i cannot see it in the User Mapping tab. How is it possible. I found no documentation?
Thany you and best regards
Juergen

I am using EP7 Stack 11 and unfortunately the only options I have are:
user
admin
admin,user
It is currently set to admin, user and does not seem to work!
Phil
Message was edited by:
Phil Wade

SSO to Non-SAP using login-tickets

Hi all,
I'd like to set up an SSO connection to a non-SAP HTTP system by using the SSO web filter (iis_sso.dll) on IIS 5.0.
I've created an iView (using the application integrator) with the URL template : http://<ip-address-host>:82/reqvars.asp?<Authentication> in which <Authentication> is MYSAPSSO2=<Request.SSO2Ticket>. The reqvar.asp page comes with the web filter as an example and displays all HTTP header fields. That way you can check whether the user-ID has been extracted successfully from the SAP logon ticket. However, I fail to get any value into the REMOTE_USER variable. The ISAPI filter (iss_sso) has been installed (global) successfully.
I'm using the following settings in the verify.properties files:
remote_user_alias = REMOTE_USER
pse_file = C:\SSOFilter\verify.pse
application = portal
log_file = C:\SSOFilter\filter.log
log_level = 3
Remark: in the original example the remote_user_alias is set to REMOTE-USER: However, I feel this is wrong since the actual variable is REMOTE_USER. Also I have seen this one in another forum post as being a working properties file. Or should I use original value?
No entries are being written to the log so I believe nothing is happening at all.
The SSOFilter folder contains the following files:
iis_sso.dll
sapsecu.dll
sapsecu.lib
verify.properties
verify.pse
mfc71.dll, mfc71u.dll, msvcp71.dll, msvcr71.dll and sapsecin.exe
This folder also has been added to the environmental PATH variable.
Any suggestions would be highly appreciated (and rewarded ,
Frodo

Hi,
I dont have much info related but i can giv u hint
refer OSS Notes 442401 and 723896.
When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
In the first case, the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
In the second case, the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
You can refer following link :-
http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
user authentication and SSO
http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
Authentication Using a Directory with SSO Integration Using Logon Tickets
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
SSO
SAP Logon Ticket-based Single Sign-On
http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

SSO to Web App using Application Integrator - not working

Hi,
I've set up App Integrator for my web application, following the Yahoo example in the guide. My URL template is <System.protocol>://<System.server><System.uri>?<Authentication> and the fraction for user mapping is op=<MappedUser>&pwd=<MappedPassword>.
It doesn't log me in. Even if I change the URL template to the actual address of my web app and use a real user & password (rather than <Mapped..>), it still doesn't work.
I've got SSO to my web app working using a HTTP system and URL iview but I would really like to see the App Integrator working as well. Any ideas?
Many thanks
Jane

Can anyone please help with this? I installed a http sniffer so maybe I could see what was going on. My HTTP System simply goes to the URL with the parameters added as expected, but the app integrator one is a bit more complex - I can see the URL & parameters in this function:
    function requestTargetURL() {
      var theURL = "<b>HTTPS://(myserver)/log-in.htm?op=(####)&pwd=(####)</b>";
      var dsmObj;
      if (hasNestedFrameStructure()) {
        location.replace(theURL);
        dsmObj = parent.EPCM.DSM;
      } else {
        document.body.scroll = "no"; // for IE only
        var theIframe = document.getElementById("iframe_GETRedirect_1593748234");
        theIframe.style.visibility = "visible";
        theIframe.src = theURL;
        dsmObj = EPCM.DSM;
        document.title = 'JDS';
    function onloadhandler(){
      setTimeout("requestTargetURL()",1);
and the server/username/password are all correct but there's a lot of other stuff in there which I'm not sure how affects it. Anyone know have any ideas why this isn't working? Does it matter that my web app is https but the portal is http?
Any help greatly appreciated!
Thanks in advance
Jane

Issue with user mapping and SAP reference system

Hello Gurus,
I have this strange system behaviour when preparing my system for single sign-on using user mapping.
Case 1.
In the user management property category, I have the following defined.
Authentication Ticket Type - SAP Logon Ticket
Logon Method - UIDPW
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_PRD
Result= when I go to identity management to assign the reference system (the default alias - SAP_PRD)...I do not see the system alias there.
Case 2:
In the user management property category, I have the following defined
Authentication Ticket Type - SAP Logon Ticket
Logon Method - SAPLOGONTICKET
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_DEV
Result, when I go to the identity management to assign the refernce system (the default alias - SAP_DEV), I see it there.
What might be my issue? Does it mean I can't assign SAP reference if I am using UIDPW as logon method?
Please help me.

Hi Mahesh,
Thanks for the feedback. I am relatively new to EP...so please I won't mind if you can guide me on how to go about this.
This is what I did...
I chose System Administration > Permissions
In the PCD, I located my system with the alias, SAP_PRD
It opened up the permission assignment area.
Now I have these permissions set
Administrator - Full Control
Administrators - Full control
com.sap.caf.eu.gp.roles.superuser - Full control
Everyone (built in group) - Full control
Everyone (Everyone role)- Full control
super_admin_role - Owner
For all the above End User box is checked.
I can't find anyone end user group .
Once I pick UIDPW, the alias disapperars from the reference system list.
Please help.

Is there any downside to using a reference type library if I use Time Capsule and will do file management only from within Aperture?

Have done a lot of reading to get prepared to convert to Aperture 3 and have this question regarding setting up my library type.
I'm not a professional -just a heavy user hobbyist.
It appears that the major factors in using reference style is to backup the images with Time Capsule and always do moves or deletes from within the Aperture application.
If my architecture matters here's what I have that may be involved in photo management and editing:
iMac (latest 27" high power version with lots of memory)
Internal 2TB HD where the library is stored
External (FireWire) 2TB HD where the images are stored
External (FireWire) 6TB HD backup drive
In the future an iPad for remote work on images (when/if available) and a Mac laptop (for same remote use)
I see major downside issues to letting the library manage my files - such as inaccessibility (or awkward accessibility) to the images for other programs, and performance issues when the library gets large (thousands of images or 100+ gb in size)
The chief complaints I've seen regarding using a reference mode is the broken link issues created if file management is done outside of Aperture (adds, deletes, moves of files) and the inability to use the Vault function for backup.
One feature that I imagine I'd like to have is maximum integration with Final Cut Pro X and that's one area I haven't seen much on and would be interested to hear about if that integration is affected with the choice of managed vs referenced library types. (I like to produce film clips that are combinations of pics and video and want to be set up so that is done in the easiest fashion when working in FCP X)
I'm sure I've not seen all sides of this issue and would like to see some discussion around this question.
Thanks to everyone contributing!
Craig

Goody, Goody, you hit a few of my favorite subjects! Herewith some comments, with the usual caveats - true to the best of my knowledge and experience, others may have different results, YMMV, and I could be wrong.
I run Aperture on two machines:
-- 2007 Mac Pro with 2x2.66 GHz Xeon, 21 GB of RAM, a 5770 GPU, and multiple HD. I have about 11,000 images, taking up 150 GB. (Many are 100 MB TIFF, scanned slides)
-- 2006 Mac Book Pro with 1 2.0 GHz Core Duo, 2 GB of RAM and a 240 GB SSD.
Two very different machines.
-- Aperture Libraries are all the same - Managed or Referenced. If Managed, then the Master image files are inside the Package, if Referenced, they are outside, and you can have any combination you want. Managed is easier, but Referenced is not hard if you are the least bit careful.
-- While the sheer size of an Aperture Library is not a big issue, the location on disk of the different components can have a tremendous impact on performance.
-- Solid State Drives (SSD) read and write faster than regular Hard Disks (HD) and, what is more important, empty HD read and write much faster than full HD.
-- Aperture speed requires a combination of RAM, CPU, graphics processing unit (GPU) speed, and disk speed. The more RAM you have, the less paging you will see. With enough RAM, the next bottle neck is CPU (speed and cores) and GPU speed. But even then you will still have to fetch an image (longer if you pull the full resolution Master, read and rewrite the Version file, and update the Preview and Thumbs.
So what works?
-- RAM, RAM, and more RAM. 4 GB will work, but you will page a bit. 8 GB is much faster. On my old MacPro the sweet spot was about 16 GB of RAM.
-- Keep your Library on your fastest (usually internal) drive. Keep that disk as unloaded as possible. How do you keep it unloaded? Either buy BIG, 1 TB+ or move your Masters off onto another disk. The good news here is that as Master files are written only once and never rewritten, speed of this disk, as opposed to the disk that holds the Library, is not important. There is a one second pause as the Master is read into memory and, if you have enough RAM, that is it - the Master will never be paged out. If, on the other hand, you do not have enough RAM, and you do a lot of adjusting at full resolution, then the speed of the disk that holds your Masters will become very important due to paging.
-- I found that I picked up a tiny bit of speed by keeping the Masters on a dedicated disk. Thus, in your configuration, if you can dedicate that 2 TB FW HD to your Masters, you should see very nice performance.
Final notes on backups and archives:
-- One conventional wisdom is that you should make an archive copy of every image file before or as you load them into your system. (Aperture in this case.) This archive is then never touched or deleted.
-- An alternative approach is that you do not keep such an archive, but only the images that you have in your Aperture Library. And when you delete from the Library, you no longer keep a copy anywhere.
I do the following:
-- Card to Aperture. Card is then kept at least 24 hours until all of my backups have run. (I use three - Time Machine, Clone, and off site.)
-- I do not keep archive copies. If I decide to delete a file, my only recourse is to recover it from Time Machine during the six month cycle of my Time Machine backups. Thereafter, it is lost.
There are merits to both approaches.
Hope this is clear, correct, and responsive to your needs.
DiploStrat

Operating reference system will not boot.

hi! bought the iphone 4s in Italy and it does not work. Operating reference system will not boot. Change of firmware and restore did not help. How can I change it while in Russia. Can I send in the mail store??

Hi NcBunky,
Are you using Win 7 64 bit? Did you update the Texas Instruments (TI) USB 3.0 XHCI Host Controller?
I have an H8 1380t PC. Updated the TI USB 3.0 driver and had the same problem.
When booting the PC with the USB 3.0 external drive connected to the PC the PC would not boot. When booting the PC with only the mouse, keyboard, and a USB 2.0 external drive attached the PC would boot. Once booted you could attach the USB 3.0 drive and it worked fine.
Solution was to roll back (reinstall) the TI USB 3.0 XHCI Host Controller to the original factory installed driver.
System now boots with the external USB 3.0 drive attached.
Jaco
****I am not an HP employee****
Please give a" Kudos" if advice received is relevant or" Accept as Solution" if your problem has been solved.
+++++++++++++++++++++++++++++++++++++++++++++++++++++
H8 1380t CTO, Intel i7 3820
16 GB DDR3
Pegatron Motherboard- IPIWB-PB (Pittsburgh), Radeon HD 7570 1GB. Win 7 Home Premium upgraded to Windows 8.1 Pro.
Envy Phoenix 810-150se, Intel i7 4820k
16 GB DDR3
Pittsburgh2 Mainboard, NVIDIA GTX 645- 2GB GDDR5. Win 8.1 Pro.
HP 560z CTO AMD Phenom II X6 1090T
16 GB DDR3.
Radeon HD 6570
Win 7 Home Premium upgraded to Win 7 Pro.
HP ENVY 17t-j000 CTO Quad Edition Notebook. I7 4702mq
12 GB DDR3
Nvidia Graphics
Win 8 Pro
Errare humanum est.

Implications of Reference System in SAP Portal

Hello Friends,
We have a situation where 30 of our existing users have IDs exceeding 12 characters in current non-SAP system. In ECC 6.0, I believe there is a limit of 12 characters for user IDs.
As these users would be using SAP portal as their primary means of interaction with all SAP back-end systems, we are planning to keep their existing user IDs in SAP portal and creating another user ID (<12 chars) in all back-end systems (ECC/BW/CRM). We'd use ECC system as a reference system to map the userIDs.
I've a few questions regarding this approach.
-Is user mapping necessary for all portal users or only these 30 users need to maintain it?
-Is it mandatory for the reference system to be up and running all times? Should the reference system breaks down for some reason, would it hamper connectivity of all mapped users to other systems as well?
Appreciate your inputs.
Thanks,
Vishwas Madhuvarshi

Hi Vishwas Madhuvarshi,
-Is user mapping necessary for all portal users or only these 30 users need to maintain it?
How are users authenticating against the back-end system?
-Is it mandatory for the reference system to be up and running all times? Should the reference system breaks down for some reason, would it hamper connectivity of all mapped users to other systems as well?
If the referenced system is down it will only be an issue when the user goes to an area where the back-end system presents content or data. Pure portal areas will not be impacted.
Best regards,
Duncan

How to use foreground dispatch system of android NFC with AIR native extension?

Hello,
I'm developping an AIR application which invokes NFC on android, via AIR native extension (ANE).
I would like to enable foreground dispatch system of NFC (see http://developer.android.com/guide/topics/nfc/advanced-nfc.html#foreground-dispatch), but unfortunately it has not been achieved so far.
[Problem]
For enabling foreground dispatch system of android NFC, we need to listen some android native events e.g.) Activity.onNewIntent(), Activity.onPause() and Activity.onResume(). But I have no idea how to dispatch them to ANE. Could anyone tell me how to get it?
I know there is an available ANE for android NFC as follows:
http://code.google.com/p/ane-lab/source/browse/#svn%2Ftrunk%2Fmobile%2Fandroid%2Fjava%2Fnf c1
But it is not fit for our use case, as it just uses "intent dispatch system" (another way to use android NFC).
Maybe AIR must be extended for this case, but any information is welcome.
Thanks.

Hello
My name is Sadao Tokuyama.(http://twitter.com/tokufxug)
Is the person who is to manage the sample code in experimental AIR
Native Extension.
If you want to achieve the de-patch system foreground NFC, it is
necessary to consider the following points.
1.Create FREFunction for initial processing. processing of onCreate.
2.can be obtained in onResume Event.ACTIVATE. After issuing
Event.ACTIVATE, call the FREFunction to run in onResume.
3.can be obtained in onPause Event.DEACTIVATE. After issuing
Event.DEACTIVATE, call the FREFunction to run in onPause.
4.onNewIntent can be obtained at InvokeEvent.INVOKE. After issuing
InvokeEvent.INVOKE, call the FREFunction to run onNewIntent.(Gets the
Intent of the scanned NFC. : FREContext.getActivity().getIntent())
I have committed the sample code. Your reference.
http://code.google.com/p/ane-lab/source/browse/#svn%2Ftrunk%2Fmobile%2Fandroid%2Fjava%2Fnf c-foreground-dispatch
Thanks.

R/3 reference system

Dear SDN,
In the security settings under UM configuration, what does the R/3 reference system do?
Thanks
Jeremy

Hi Jeremy,
It is a portal security setup for user authentcations. Once configured with a backend R3 system, this will allow
the R3 user to logon to the portal, with their R3 used Id and password. So you do not need to import the R3 reference system, one-by-one. The R3 reference will maintain the UM management (update/delete) R3 users and password.
Regards,
AAAttar

Online Reference Systems

hello I am trying to access sap Online Reference Systems on sap portal https://websmp105.sap-ag.de/BAiO-demo using SAP GUI BUT i got some error " Hostname 'iwdfvm2302.wdf.sap.corp' unknown Check your application server name " but the server name is correct, can any one help me ?
Thanks in advance

Amr,
It sounds like a DNS issue.
If you perform a lookup on that address "websmp105.sap-ag.de" do you get a reply?
I would try both the machine and the SAP server and verify both are resolving it correctly.
For example, I return a 96.16.87.187 with multiple aliases but nothing for iwdfvm2302.wdf.sap.corp.
If it cannot resolve that address, you would get a message that it is unknown. You may only have to update the host file with the correct info.
Regards,
Zecher

How many mails i can send at a time per day using APEX mail system?

HI,
I am working on application, when i have written a process to send mail, i have a project where i have to send mail at a time for all the email id's
given list there are upto 5000 email id's where text body also include certain set of data from a report. thinking at a time 3000 its difficult i divided
it region wise, but still each region have 2000 odd email id's. during testing when i run the process just 950 mails i could send then i got a error
saying "ORA-20001: You have exceeded the maximum number of email messages per workspace. Please contact your administrator." so please
can any one help me to know How many mails i can send at a time per day using APEX mail system?
Thanks in advance
Gowthami

Hi jfosteroracle,
You are getting the error may be the following reason,
Check the following,
Login as ADMIN and Goto -->Manage Instance-->Instance Settings--> Mail-->Maximum Emails per workspace
Actually this number denotes the Number of mails can be sent per 24 hour for the workspace,It may exceeded.
It may be the reason.
Thank you.
Regards,
Gurujothi
Edited by: Gurujothi on Jun 27, 2012 5:54 AM

HT2477 I have a new MacBook Pro which has Windows 7 installed so I have only ever used it as a PC, I would like to use the apple system but was never shown how to do this and I cannot even work out how to switch it on . If I just press power iI get wind

I switch the power on on my MacBook Pro I get windows7
this is no problem but I love my IPad and would like to use the apple system on my MacBook .
CAn anyone tell me which keys I press to change from windows 7 to Apple most articles I have read tell you it is easy but not one says "firstly press x then press y and when you see c press v so I no idea how to do it,
I am well educated but I am 75 so I do not understand the jargon but I am fairly good at using computers and I do like the app system.
I Would be very pleased if someone can advise me
best regards
TOm

Reboot, hold the option key down as soon as you hear the chime. When the Boot Manager appears select OSX instead of Windows.

SSO to Web App using Application Integrator - not working (SP15)

Hi,
I have created a web app system and generic app integrator iview for my web application (and set up user mapping etc.), following the Application Integrator how-to guide but it does not log me into my web application. I have got the Yahoo example working, and if I use a HTTP System & URL iview for my web application, that also works. Can anyone tell me what the problem could be, or where I should start looking?
If I use a http sniffer, I can see the correct URL and parameters in the following:
function requestTargetURL() {
      var theURL = "<b>HTTPS://(myserver)/log-in.htm?op=(####)&pwd=(####)</b>";
      var dsmObj;
      if (hasNestedFrameStructure()) {
        location.replace(theURL);
        dsmObj = parent.EPCM.DSM;
      } else {
        document.body.scroll = "no"; // for IE only
        var theIframe = document.getElementById("iframe_GETRedirect_592312569");
        theIframe.style.visibility = "visible";
        theIframe.src = theURL;
        dsmObj = EPCM.DSM;
        document.title = 'JDS';
    function onloadhandler(){
      setTimeout("requestTargetURL()",1);
but something else must be happening for it not to work. Can anyone give me any pointers?
Many thanks
Jane

Bit of a weird one: I've found a way to make it work but I'm not sure exactly how... the problem was that the portal was opening my web app URL in an iFrame (which can be seen from the code above). I tested this by just creating a html page with the URL + parameters in an iframe, and it wouldn't log me in (and took over the whole browser). So I guess the problem is with my web app rather than the portal.
However... I then discovered that if I add my web app address to the Local Intranet security zone in my browser (IE6) settings (before it was in the Trusted Sites zone), it no longer minded being in an iFrame, my test html page worked and so does the portal iview. I cannot find which security setting is causing this - I've tried changing the Trusted Sites to match the Intranet zone settings exactly, but it still doesn't work if my web app address is Trusted opposed to Intranet.
If anyone has any idea what is causing this behaviour, I'd be very grateful - obviously it isn't a portal issue but I'd still like to find out the cause in case it comes up again in the future.
Many thanks,
Jane

Setting up SSO between EP and back-end SAP systems

Can anybody give me some insight about setting up SSO between EP and back-end SAP systems. If possible some links to write up would be great.
Thanu

Hi,
This link gives you a detailed information on setting up SSO : http://help.sap.com/saphelp_nw04/helpdata/en/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
Some How-guides:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e676ec90-0201-0010-cfa3-90b7c1291903
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/77378b3d-0b01-0010-ffa5-c6941e286c43
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/80fbc690-0201-0010-1aba-93d5c8232b4a
Regards,
Sunil

SSO to R/3 using a reference system

Similar Messages

Maybe you are looking for