SSO via Windows authentication for a BSP application

Hi,
is it possible to configure/implement a bsp-application, so that the user of the application is authenticated in the SAP system through the windows user (without entering the user or password). I search for a mechanism, that is like the SSO mechanism in the SAP EP. We don't have SAP EP, neither we have a java stack installation.
Exists a way to implement this scenario?
My idea was it, to use the same functionality, like in the SAP GUI, when configuring SSO. Unfortunately I don't find any hints about this topic.
Regards,
Thomas

One best way is to embed the BSP page in the iview of the EP. As your are telling EP is not available i think there is no other way around.

Similar Messages

How to make use of Windows authentication from my Java application

I have a Java application, Instead I design one more login page for my application, I want to make use of Windows Authentication.
How should I use that windows authentication in my java application
can any help me in suggesting a solution

How will they be able to access your application if they aren't users of the system?

Got Display driver via Windows Update for Windows 8.1 and try to use it for Windows Server 2012 R2

Hi Everyone,
the following driver cab is from Windows Update:
https://onedrive.live.com/?cid=5be01620eea95d8c&id=5BE01620EEA95D8C!138&ithint=file,.cab&authkey=!APDi54-R1Ob5IWQ
It includes this display driver:
Intel(R) Q45/Q43 Express Chipset (Microsoft Corporation - WDDM 1.1)
My problem is: I can't install this driver on Windows Server 2012 R2.
I tried the following, nothing worked:
a) pnputil -i -a intel.cab
b) Extract cab, update the device's driver in device manager, select "search for driver software in this location"
c) copy the files in system32/, system32/drivers, syswow64/ from a Windows 8.1 system to a Windows Server 2012 R2 system
Isn't it true that any Windows 8.1 driver should also work for Windows Server 2012 R2 (same os version)?
Thanks for your replies.
PS: I first posted my question here:
http://answers.microsoft.com/en-us/windows/forum/windows8_1-hardware/got-display-driver-via-windows-update-for-windows/31c287c8-ef84-4c81-8530-8c51412376b7

Hi,
Additionally, did you check this article?
http://www.driveridentifier.com/scan/download.php?item_id=90475670&scanid=9B44546E3BB9410D877D9A90D1439AF8&hardware_id=PCI%5CVEN_8086%26DEV_2E12
Regards.
Vivian Wang

Windows Authentication on a Coldfusion Application

Hi community!
I am working on a coldfusion application and I had a meeting
today to show my client my progress. The IT director asked if they
could use Windows Authentication in the new program because the
doctors and therapists forget everything. My answer was kind of
defensive but they asked me to figure that out.
I have no idea as where to start! Can somebody put some light
in my head?
Any thoughts? Any ideas? Any resources?
I work full time in a software development company, this
project is part of the jobs I do on the side so I can afford gas!
he,he In my primary job we have never created a coldfusion app that
works like that. So that's why I am confused.
Thanks fellows!

I use integrated Windows Authntication on my intranet. There
is a checkbox for it under IIS.
This allows the uername to be visible to CF using the
#cgi.auth_user# variable.
As for security, I maintain a data table with each username
and appropriate permissions. In my application, I merely confirm
that the currently logged in user is authorized for given areas of
my site.
Works great. The only real caveat is that some places might
aruge that you are not verifying that the person behind the
keyboard is really the person currently logged into that particular
machine on the network. My defense is that this scenario is the
responsibility of the currently logged in user, rather than the web
developer. Your environment may dictate more stringent criteria or
verification.
BTW: My implementation has passed muster with our security
audits in the medical field for the last eight or nine
years.

Windows authentication from an enterprise application

Hi All,
Does anyone has any idea how to go about implementing windows active directory authentication from an enterprise application.The requirement is that the users across a particular domain should be able to use the application by using their windows login/password.
Thanks

I think you should look at Sun or Oracle Identity Management Solutions
These product offers what you are looking for and they also have SDKs, so you can really extend their strength.
Regards,
Michael

How to set up use of relative URLs for a BSP application

Dear all,
I need to access a BSP application through our external portal.
This is failing because generated URLs are absolute URLs (they mention physical server name, not known of course on the internet) where they should be relative URLs (they use external portal URL as prefix).
How to set this up?
I'm logged on http://myportal.com/irj/portal and want to call a BSP application. To build this page, my internet client (Internet Explorer) tries to get elements from the server. Looking at HTTP trace, I can see that my IE is trying to reach the physical server, not known on internet of course, then page loading fails.
Ex absolute URL : http://myservername.domain.com/sap/bw/[...]/image1.gif
This is the behavior I can see at the moment.
Relative URL : http://myportal.com/sap/bw/[...]/image1.gif
This is what I'd like to see.
Many thanks in advance for your help.
François

Any idea ?

User validation for the BSP application

I wanted a user to access the bsp application.
I already have the user names maintained in the database who will be using the application.
i am using the application class for my application.
where should i do the user validation and how.
i know tst if i would had used the model class then i can do it in the request method of the model class.
but where to do it when using the application class.
Thanks

Hi Din,
I assume that the usernames that are present in your Database also exists in the WAS Server.
i.e. The database has a part of users that are present in the WAS Server.
Your need is to allow only those users in the database to access your bsp application and not others correct!
If your first BSP Page is a ...
View
1.In the DO_INIT method of the Corresponding Controller Class populate the internal table that is present in the Application Class with the usernames that are present in the database.
2. In the DO_REQUEST method of the Corresponding Controller Class check for the username who runs your BSP Application is present in the Database.
You can get the username who run the bsp application using the system field...
data: username type string.
username = sy-uname.
So if the username is in the database show your bsp page else show an error page.
You can directly check for the sy-uname is present in the database.
Page with Flow Logic
It is same as MVC only thing is that method name changes...
Place the code in the DO_INIT of MVC in onCreate of Page with Flow logic.(Populate the internal table of the application class with the usernames from the database)
Place the code in the DO_REQUEST of MVC in onRequest of Page with Flow logic.(Check whether the sy-uname is present in the itab or directly in the database).
Hope it solves your problem
Regards,
Maheswaran.B

Windows authentication for SQL 2005 DB connect

Hi all,
I'm trying to create a DB connect
in the connection parameters when I mention a user name and password who is created as a SQL authentication then it is working fine.
but in my connection parameters if I mention a user name password who have a Windows authentication in the SQL 2005 which we are trying to connect then it gives an error. It is not connecting .
Can you please tell me how can we connect using a windows authentication.
Mey

Solution to solve the actual issue :
For the SAP system to use standard default NT authentication
Please refer to this link: http://help.sap.com/saphelp_nw04s/helpdata/en/9c/d736b880c34f76b507bac7751a0474/content.htm
1. Database login:
SQL Server login with System Administrator privileges, that is this login should be member of the sysadmin fixed server role on the target SQL Server. If such a login does not exist, you have to create it on the target SQL Server. The SAP multi-connect mechanism allows both integrated security logins and the use of SQL Server authentication. For security reasons, we highly recommend to use integrated security (Windows authentication). If you use Windows security, leave this field empty.
2.  Password / Re-enter password :
If you have decided to use integrated security, leave these fields empty. Otherwise enter the password of the SQL Server login.
The above pointer was used to solve the login issue but we still had issues in getting the schema visible in SAP BW. As the user ID was left blank we were not able to get the schema view for the <blank> user.
Note to be applied to solve the Schema issue :
note 1091929 :  Link
so now you can enter the schema to be used in DS creaton screen.

How to reduce font size in a drop down for a BSP application

Hi,
We are having an issue with the drop downs in BSP applications after SAP system upgrade. The R/3 system is upgraded to EHP4 and the BSP is embedded in a iview in the Portal.
When accessing BSP the dropdown values font size is showing big. Where can we change the font size for the dropdown values?
Thanks,
Madhavi

Hi,
It is possible to change font size with the html code.
here is a sample code:
In Layout:
 ("define your font size and font family")
<htmlb:dropdownListBox id = "myDropdownListDay"
 tooltip = "Quick info for myDropdownListBox">
<%LOOP AT <<internal-table> INTO fs_mod. %>
 <htmlb:listBoxItem key = "<%=fs_mod%>"
 value = "<%=fs_mod%>" />
<%ENDLOOP.%>
 </htmlb:dropdownListBox>
 
Hope this solves the issue,Let me know if any queries.
Regards,
Rajani

What is windows authentication for SAP?

Hi All,
Could you please expalin me on what is windows authentication and why do SAP need it ?
I hav got a message from BASIS consultant saying that SAP/ PM accounts needs windows authentication nad we need to mail him for that....what did he mean and what happens if we dont?
Thank you,
Regards.

read in the net..

Windows authentication for SQL Server

We have a SQL server 2000 resource that we are provisioning to from IdM 7.1. The account to connect to Dev environment SQL server is set up for windows authentication. Lets say this account is Domain\user1. For development purposes, I am using my local machine (running tomcat 5.5) to connect to DEV environment and i logon to my machine as Domain\user2.
Using SQL Enterprise Manager, i can do a "run as" and ask it to connect to the Dev environment as 'Domain\user1' and it works fine.
Can i do something similar from IdM . I have tried putting in sqljdbc_auth.dll in the path and turning on the integrated security option in the connection string. However, as expected, it starts using 'Domain\user2' credential (even if I specify Domain\User1 credentials in the connection parameters).
I would like to be able to use an account other than the user who is logged into the machine to establish connection from IdM to SQL server using windows authentication. Any thoughts?
Thanks in advance.

Hi All,
I am trying to create a data source in oracle console by connecting to SQl server 2008 database using windows authentication.I am able to connect to database using SQL Server Authentication,but
When i try to connect using Windows Authentication,I am getting errors.
Please help me in finding a solution.
Thanks,
Krishna Gaddam
To connect to oracle you need to use login created in oracle database. there is no windows authentication in oracle. As Olaf said please post this question in Oracle forum or search web you will find answer
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

How to use two different LDAP authentication for my Apex application login

Hi,
I have 2 user groups defined in the LDAP directory and I provided the DN string for apex authentication something like the below
cn=%LDAP_USER%,ou=usergrp1,dc=oracle,dc=com
cn=%LDAP_USER%,ou=usergrp2,dc=oracle,dc=com
The problem is I couln't pointout both the groups in DN string, I am trying to allow both usergroups to access the application.
Does anyone know how to define both the group in LDAP DN String ?.
Thanx in advance
Vijay.

Vijay,
I don't think you'll be able to use the built-in LDAP authentication scheme. Just create a new authentication scheme that has its own authentication function. In that function code your calls to dbms_ldap however you need. Search the forum for dbms_ldap.simple_bind_s to find examples.
Scott

JRE1.6 in Windows Vista for Swing based application

Hi,
I am running a Swing based and applet based application in Windows VISTA using JRE 1.6_U13. The text font is appearing bold in JRE 1.6_U13 whereas it is appearing normal while using JRE 1.5, though the style of the Font
is "SansSerif", PLAIN and size 12 for both JRE 1.6 and JRE 1.5.
Reason for the Issue:
Swings follows the concept of taking the display values from the Windows UIManager(). The UIManager consists of keys and values. The values for the keys change from OS to OS. As a result, if the UIManager key values are not overridden with the customized values, the display will change from OS to OS. Hence the issue has occurred.
Analysis:
Case-1:
1.     CALM is setting the font style to Font("SansSerif", Font.PLAIN, 12).
2.     This font is being set to the Label and Text components in swings.
3.     The font class consists of Font.PLAIN argument whose value is 0 as per the java API.
4.     This value cant be changed.
5.     Hence we couldnt solve.
Case-2:
1.     We tried to get the key value for the key Label.font and tried to override its value.
2.     But then the issue is with the Font.Plain which is one of the arguments in Font object.
3.     Hence couldnt achieve it.
Case-3:
1.     We thought of creating a new font where in we can have control over the weight and width of the text. Then set this font to respective key of the UIManager.
2.     Here the weight indicates the bold thickness. As a result of which we thought of changing the weight.
3.     But then the options that we have in the API are less and the least weight value is TextAttribute.WEIGHT_EXTRA_LIGHT which is equal to 0.5.
4.     This value is not sufficient as the boldness of the text is comparatively more than the text that is appearing in jre-1.5.
5.     Then we tried to give the value manually, instead of using the API. But then, it was mentioned in the API that any values mentioned other than the ones specified in the API will be rounded to the nearest integer.
6.     By doing this we have customized the boldness of the Label, but could not achieve the required boldness of the Label.
Please need a urgent solution.

Hi,
The reason of the problem is Antialiasing effect of the graphics. In Control Panel -> Performance Information and tools -> Adjust visual effect, if the 'Smooth edges of screen font' is unchecked then the boldiness of the font or the Antialiasing effect is not there.
But this effect is reflecting not only on my swing based and applet based application but also on the whole system.
I tried to call the renderingHint method and change default value of the key KEY_TEXT_ANTIALIASING to VALUE_TEXT_ANTIALIASING_OFF, to make the antialiasing effect off for the application.
I implemented the below code:
Graphics g= new Graphics();
Graphics2D g2d = (Graphics2D)g;
g2d.setRenderingHint(RenderingHints.KEY_TEXT_ANTIALIASING,
RenderingHints.VALUE_TEXT_ANTIALIAS_OFF);
But I am not able to create an object of Graphics.

Windows authentication for Oracle Databases

Steps Followed For OS Authentication.
OS : Windows 2000 Server with latest Service Pack 4
Database: Oracle 9i.
Objective: We are having a server in which Oracle 9i database is residing.We want to create
a user that will be autheticated by Windows 2000 OS and not by Database.
The server itself is used both as a server and a client.
1. The init<sid>.ora file was modified and the parameter OS_AUTHENT_PREFIX="" was added.
2. The Oracle Instance was started using Init<sid>.ora file and not SP file.
3. An operating system account was created say Test.
4. Two groups OSDBA,OSOPER were created and Test user was made member of Administrator,Osdba,Osoper.
5. Connected to the SQL PLUS as SYS then issued the commands
Create user Test identified externally;
Grant connect,resource,create session to Test;
6.Logged off from the machine and logged into the same machine with user Test and with its
corresponding password.
7.From command prompt we tried sqlplus CONNECT / .
Ideally it should connect as the user Test but it is not connecting.
NB All the above operation was carried out in the same machine on which the database is
residing.

%ORACLE_HOME%\DATABASE\SPFILE%
Given this command also..SQL>create pfile from spfile;
>>
you can see the initSID.ora in the directory where
your spfile iswhere to see that?see in %ORACLE_HOME/database/initsid.ora
edit the initSID.ora add the line
What to edit?its a text file ,open in notepad add the line
OS_RULES=TRUE
then save the file
start the system by
startup pfile='c'it can be any path or any specific path.no it is the one from
startup pfile='c:%ORACLE_HOME\database\initsid.ora
Hope this will help
You need a pfile to chnage the server settings
Or else
issue
SQL>alter system set Os_rules=true scope=spfile;
THen restart the database as suugested by Dbaron

Implicite Enhancement for a BSP Application (MVC)

Hi Experts,
we have a SAP standard BSP Appl in SCM (Appl /SCF/UIBSP) and want to add an additional icon with hyperlink in one of the views (main.htm) at a certain position.
Is there a way to do this without a modification of the HTML-code, maybe with the enhancement framework?
Thanks for every hint!
Regards,
Mathias

Hi Mathias,
While going thru SDN I found this thread and I have a similar requirement that I need to enhance this standard ICH application and have to add one button and when user clicks on it I should download some data.
I would like to know if there are any alternatives for this wihout copying/creating a Z program. Incase we have to create a z program, could you please let me know incase of any precautions that I should take care of.
Thank you.
Regards,
Sudhakar Karumuri.

SSO via Windows authentication for a BSP application

Similar Messages

Maybe you are looking for