User Mappin between R3 and EP

Dear All,
we have separate servers for R3 and EP,
There are some login id'a, who have access in R3 as well as EP, but there user names are different in R3 and EP,
I came to know that, we can login in R3 and EP with the same login ID, Can you please let me know the process, how it works..
I think, its possible through "Single Sign On"....
Please let me know the process, How it works? and How to map it?
Thanks in Advance................
Regards
Vamsi.

Hi vamsi,
If you establish SSO there should be same user id in portal aswell as in R3 and if both users are different you need to do user mapping.
Please find the below links regarding User mapping how sso works.
http://help.sap.com/saphelp_nw04/helpdata/en/f8/3b514ca29011d5bdeb006094191908/content.htm
[This FAQ content was deleted: visit  SAP Single Sign-On for help]
http://help.sap.com/saphelp_ep50sp2/helpdata/en/4d/dd9b9ce80311d5995500508b6b8b11/content.htm
http://wiki.sdn.sap.com/wiki/display/EP/HowdoItestSSO
Hope it helps....
Thanks,
Rahul.
Edited by: rahul.girmaji on Nov 22, 2011 7:44 AM
Message was edited by: Jason Lax

Similar Messages

  • Users mapping between EP and ABAP system

    Hello
    I'd like to ask for some guidance in my quest
    Current situation looks like this:
    I've configured UME in AS Java to work with LDAP as read only data source. Then I've configured SPNego to run SSO - It works, users from MS AD can log into portal.
    Now I have application in WD which authorizes via EP/AD - works fine.
    And next step is users mapping between AD and ABAP backend (serving some BAPI's for WD app)
    I've found a bunch of help pages starting from
    http://help.sap.com/saphelp_nwce711/helpdata/en/0b/d82c4142aef623e10000000a155106/frameset.htm
    But somehow it's quite complicated to achieve this mapping. I've tried to set RFC destinations logon type to user mapping but without succes.
    Can anyone point me to some more clear example or give path to configure this scenario? Is there a way of configuring this with NWA or some XML file editing is required?
    Any help will be appreciated.
    BTW: whole environment is in version 7.11
    Best regards
    Maciej

    There is no equivalent to SPNEGO on the ABAP side.
    If your goal is to propagate the user, then possible options are:
    -> Wait for SAML 2.0 or invest now in a SAML 1.0 provider.
    -> Use the same kerberos ticket for the EP as what your ABAP system will accept: route = SNC and 3rd party libraries.
    -> Issue SAP logon tickets for the ABAP system from the EP, and use these in your WDA.
    Another option is to expose the service with saved logon data in the ICF. If the service is just a wrapper for the BAPI, then you can also consider using trusted RFC between the service and the backend, but this might not be acceptable for your service.
    I have only done experimental stuff with this and some of the above is not released yet. Also consider the consequences, even if it "does work"...
    Cheers,
    Julius

  • SRM supplier user synchronization between SUS and productive client

    Dear Sirs, in our SRM environement the contact persons (and relative system users) created by suppliers in the auto-registration procedure, should be synchronized between SUS and productive client.
    (in our implementation client 150 and 330) .
    This sync mechanism should be valid also for lock-unlock status of the user and reset of the password,
    but in both cases it does not works (a locked user, manually unlocked from client 150 via SU01, is again locked in client 330, the same from 330 client).
    Could you suggest a solution or some checkpoints ?
    Could you provide some links for the configuration of this mechanism ? (we have seen only the SPRO node " Maintain Systems for Synchronization of User Data") ?
    I am not shure if XI is implicated or not.
    Best regards,
    Riccardo Galli

    HI
    Maintain Systems for Synchronization of User Data
    In this IMG activity, you specify the RFC destinations to which user data from SUS User Management is replicated.
    In the Logical System field, you should enter the backend destination with which the user data should be synchronized when they are entered in SUS. On the basis of this information, the system determines the relevant RFC destination automatically.
    Specify the function modules for creating, changing, or deleting a user in the external system for each logical system:
    Function Module for Creating User: Function module that is called to create a user in the external system
    Function Module for Changing User: Function module that is called to change the user in the external system
    Function Module for Deleting User: Function module that is called to delete the user in the external system
    If this data exists, you can set the indicator Use Purchasing BP ID to use the business partner ID from the procurement system instead of the business partner ID from SUS.
    What are the settings maintained here ?
    external system and roles in external system
    br
    Muthu

  • Synchronizing user data between Laptop and Desktop

    We have a Macbook and an iMac. While my kids and wife went to visit the Grandparanets I lent them my Macbook, used SuperDuper to create a copy of my Laptop's drive and booted it on the iMac (ok, that is pretty cool!).
    All worked very well and now they are returning and I need to merge the information on the Macbook itself and the SuperDuper drive I have been using on the iMac.
    There are multiple user accounts on each and all that was really added on the Macbook would be photos and movies and iTunes music one 3 of the accounts.
    Is there an easy way to sync user accounts between two computers? I am quite familiar with .mac and syncing wha I would call preferences. It cannot handle stuff like synching iTunes, iPhoto or iMovie though.
    Appreciate any suggestions
    JIm

    Well ... here is what I ended up doing. Hope it helps someone
    Once the laptop came home:
    1. I made a SuperDuper image just in case (to another Firewire drive partition)
    2. Then I logged into the user accounts on each and used Backup to backup Home, iLife ... for each user on the laptop that logged in while they were gone (I asked them)
    3. Then I used SuperDuper to overwrite the hard drive on the laptop using the SuperDuper image on the Firewire drive.
    4. Then I logged into each account on the laptop where I backuped up data and restored it.
    It took a little while but everyone is happy and has their data

  • Copy user fields between PRq and PO.

    Hello.
    I have little problem.
    I prepare new user field in Purchase Requisition called for example ZFIELD it is displayed and save into table EBAN by user exit MEREQ001. Now I want to copy this field to Purchase Order when I create PO with reference to PRq. How to do that? I can't find any user exit or badi
    The new field is prepare at item level in Preq and I want to copy it to PO at item level also.
    I have extend table EKPO.
    Thank you for any help.
    A.J.

    Hi,
    Implement the BADI 'ME_REQ_OI_EXT'.
    This may help to your requirement
    regards,
    Siva

  • Can I share user account between mac and PC

    Hi, I would like some help. I have a mac mini and will add osx server on to it soon. Now I also have two Windows PC's and would like to connect everything. I would like to use the mac as my main working device (and as a server) I would then like to be able to logon to my mac account on the PC's. So share user account from the mac onto the PC's?
    Is this possible? If so is there a very details tutorial somewhere I can't seem to find one.
    P.S NOT just file sharing. I don't want the user account or fils to be on the PC's.
    Regards
    Aled

    Windows prefers to authenticate with Microsoft Active Directory.   This configuration is possible, but probably not in the price or complexity range that you might want.   Not unless you're inclined to run both OS X Server and Open Directory and Windows Server with Active Directory (or the Active Directory compatibility available with Samnba installed on a Linux server), which won't be a small investment or a small effort.
    If you want to research this, look for information on the so-called "magic triangle" or "golden triangle" configuration.   I'm not aware of a short tutorial for this, as neither AD nor OD tend to be particularly small projects to configure and deploy.
    Probably closer to your budget, a password manager or the keychain in OS X can store the access credentials.

  • Pass User Parameters between Forms and Reports...?

    Hi,
    I have been trying to pass user parameters from forms to reports using
    RUN_REPORT_OBJECT. I am able to run the report from the form, but still don't know how to pass user_parameters. Does anyone know how to do this?
    Thanks,
    AB

    You can use SET_REPORT_OBJECT_PROPERTY with the "REPORT_OTHER" parameter
    The following example passes 3 parameters to the report:
    SET_REPORT_OBJECT_PROPERTY(pt_report_object_id, REPORT_OTHER, 'paramform=no p_param_1='||pc_param_1||' p_param_2='||pc_param_2);

  • User base Synchronization between SAP and MS Active Directory Server

    Dear all!
    I'm using Web AS 6.20 ABAP and MS Active Directory Server based on Win 2003 Server.
    i successfully implemented the synchronization of user data between SAP and the ADS.
    My question: Is there a way to customize the users on Active Directory Server in regard to their SAP authorization (roles auth. objects etc.)?
    Currently I don't have a clue how to do this.
    Regards,
    Christoph

    Have you searched on SDN for "Active Directory"? That turns up a number of results. I think your expectation might be backwards though, it's not how ADS exposes SAP specific data but how SAP uses ADS to store SAP specific data. My understanding (from quite some time ago so I am fuzzy on this) is that SAP can use ADS in much the same way it can use LDAP as an external user store.
    The Security Newsletter from November 04 [https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/a1-8-4/sap security newsletter november 2004.pdf] mentions that a webinar is hosted on SDN about this exact topic, unfortunately I was unable to find a direct link.
    Regards,
    Marc g

  • Difference between VL10 and JITK

    Hello,
    How to explain to a user difference between VL10 and JITK ?
    Thanks.
    Romeo

    Dear Romeo,
    As my friend said n even u'll b aware of: VL10 is a T-code using which u can create a delivery in foreground giving the details like sales order, shipping point & delivery date as the selection. Thus it's used 4 normal del creation.
    Whereas JITK is a TCode for "Summarized JIT Calls Due for Delivery" which is one fo the SAP best prcatices for Automotive only. The other point of diff is that u can create deliveries in the background only using JITK. It is not possible to process summarized JIT calls online. JIT calls as u know r there in the shcelduing agreement along with the forecast tab thus giving the xact 1,2 weeks requirement from d customer.
    Hope it'll b enuf 2 convince d user.
    regards
    PARAM

  • Hello there - how can I share my iTunes library between two users on the same computer? I put the library in a shared folder between both and have selected this library on both as well, but when I update iTunes with music etc it only appears on one?

    Hello there - how can I share my iTunes library between two users on the same computer? I put the library in a shared folder between both and have selected this library on both as well, but when I update iTunes with music etc it only appears on one?

    Thank you Joe - I tried this but it's only showing a teensy amount of music - the stuff on the second users account as opposed to the giagntic library on the 'main' account. I actually went to a Genius Bar and they said that apple doesn't really want you to share music between accounts - parents don't want to hear their kids music etc. Which seemed strange, but it might be the case sadly   Thanks anyway!

  • What's the difference between OEM and standart licensing of VMware vSphere for users?

    Good day,
    Could you please explain me,
    What's the difference between OEM and standart licensing of VMware vSphere for users?

    The difference is usually the support you get. With OEM versions you'll often get support from the OEM and not from VMware directly.
    André

  • Differences between BADIS and User-exits

    Hi everybody,
    I am new to ABAP and wonder what are the differences between BADIS and User-Exits. I read paper but did not find a SAP documentation yet.
    Does anybody know where to find a sap document which explains both technologies?
    Greetings, AD

    Hi,
    User-Exit is a specific place in a transaction-process where SAP offers
    third parties to include there own business functionality. Actually
    User-Exit is the namespace used for Exits programmed by SAP specifically
    for SD. For the other modules it's called Customer-Exit.=20
    >Business Add-Ins (BADI) =20
    The use of object orientated code within SAP has lead to new method of
    enhancing standard SAP code called Business Add-Ins or BADI's for short.
    Although the implementation concept is based on classes, methods and
    inheritance you do not really have to understand this fully to implement
    a BADI.
    For better understanding visit.
    http://sap.ittoolbox.com/groups/technical-functional/sap-r3-dev/779183#
    Hope it was useful.
    Thansk,
    Sandeep.

  • Is there a way to sync my saved user ids and passwords between Mac and iPhone using iCloud?

    Is there a way to sync my saved user ids and passwords in Safari between Mac and iPhone using iCloud? Like I can do using Chrome for Mac and iOS...

    You three would do better to sync to google directly.  Google has a blackberry app that will allow you to sync your contacts and calendars.  The app isn't perfect, but it works reasonably well, especially if you're just using one calendar to sync.
    Then there's plenty of ways to sync those to your iPad using Google, including Exchange, or simply adding it as a google account.
    As for iCloud, there really isn't any supported or unsupported method to do what you're trying to do, at least at this time.  If there is, it would definitely be a hack and I would be wary of risking your contact or calendar data on it..

  • How to create a program that accepts 5 digits from the user between 0 and 9

    how to create a program that accepts 5 digits from the user between 0 and 9 then put them in ascending order using link-list method..

    You can use a scanner to get user input from the command line.
    import java.util.*;
    public class Test {
        private List<Integer> list;
        private Scanner in;
        public static void main (String... args) {
            new Test ();
        public Test () {
            list = new LinkedList<Integer> ();
            in = new Scanner (System.in);
            for (int i = 0; i < 5; i ++) {
                System.out.format ("Please enter a number (%d more): ", (5 - i));
                list.add (in.nextInt ());
            Collections.sort(list, new Comparator<Integer> () {
                public int compare (Integer i1, Integer i2) {
                    return i2 - i1;
            System.out.println (list);
    }

  • Query to get number of invoice created by user between from and to date

    Dear All
    I need Query to get number of invoice created by user on day and his orgainization between from and to date.
    thanks

    select count(*) from ap_invoices_all where created_by = :p_User_id
    and trunc(creation_date) between :p_from_date and :P_to_date;
    Thanks/SRK

Maybe you are looking for

  • RG registers and PLA registers - Extraction Problem

    Hi, We have updated balances in table J_2IACCBAL for initial entries for RG registers and PLA registers but the same is not available for extraction in J2I5. Could you please advise what the problem is? Regards Santosh Hegde

  • Doubt about RFC Destination in FILE to IDOC Async scenario

    hi In FILE-XI-IDOC Async Scenario we are creating RFC Destination in R/3 and XI. For Asyn we don't want response But We are Creating RFC Destination in R/3 also. Any specific reason. Thanks in advance.

  • How can i make a simple image viewer in JAVA?

    i know this is a silly doubt...but 'm new to java i have to make an image viewer which can also zoom the image please help me advance thanx

  • Alert with different repos

    if alerts like "a database is down, or a file system is full", Can these be sent from one Grid Control to another with separate repositories? i would like to know if this is possible regardless of the version, say one is 10.2.0.5, the other is 11.1.0

  • Video lags when I add effects

    When ever I ad effects to my video the video lags.  Its fine when I export it.  Is there anyway I can turn the videoquality down to stop this or something,