SSO ERP

[Former Member]

Hello

Currently I have implemented SSO with EP (Enterprise Portal) and Active Directory.

I read that you can use the EP SSO for the SAP ERP by Logon tickets. Someone could tell me how to perform this configuration or if you know any step by step guide.

Besides SSO settings I have other questions:

1. Current ERP works with local users.
    When performing ERP SSO settings, is there any way or any report to relate local ERP users and active directory domain.

2.Whoever controlled access to EP and ERP?

Thanks

[Former Member]

Hi Samuli Kaski,

thanks for the quick response.

Thanks for the info.


Reviewing the documentation of the link, users of EP and SAP ERP are not the same. for example, 100% of users can access the portal, but 40% can access the SAP ERP. understand that I must implement the scenario 3.

our current environment is as follows:

SSO EP (Enterprise Portal) Active directory windows. users belonging to a group called the Active directory portal, may connect to the EP via SSO.
SAP ERP 6.0 currently works with local users. We want to implement SSO via logon tickets with EP. What should we do to validate user connections to ERP? create a group in active directory
and EP performed the validation via logon tickets? or implementing Scenario 3

USER MAPPING? I have many doubts about the validation of the ERP.

Thank you for the help.

[Former Member]

You can assign the AD group(s) to a portal role(s). Those that have the AD group can access the portal, others can't. If the user accounts are different (for example user1 in AD and sapuser1 in SAP), you will have to configure User Mapping for the users. Users can do it themselves or you can do it for the users. Another option is to store the SAP account name in AD and use that to access the backend. For both cases you will find documents here on SCN.

[Former Member]

See the attached link for details. There are also several blogs and documents here on SCN if you bother to search for them. If your user accounts in AD and SAP are different, you can use User Mapping. I don't understand your second question.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/4b/031904ea162593e10000000a42189b/frameset.htm

[Sriram2009]

Hi

Yes and also kindly go thru the PDF document as mention in the below link

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0aaf628-9a74-2e10-c794-f22100891...

Regards

Ram