SSO

[Former Member]

Hi experts

i have followed the procedure given in the weblog

Connecting SAP systems to Enterprise portal with SSO

but i dont know how to test it and i have some doubts.

what is so special about SSO?

[Former Member · Accepted solution]

ok thanks alot for clarifing the matter.

but can anyone tell me how can i test whether SSO is working with me or not?

[pravesh_verma · Accepted solution]

Hi Ahmed,

When you create a System. <b>Go to System Administration -> System Landscape -> Your working folder -></b> Double Click the system you have created.

In the dropdown Menu of <b>Display->Select Connection Tests</b>. Here you can test whether the connection of the system you have created is working fine or not.

Now Go to User <b>Administration -> User Mapping-></b>Select the system you have created in the System Dropdown Box. Search for the user you have to set up the SSO. Once the user is displayed in the <b>Table-> Click Edit</b>.

Enter the username and password of the system you have to establish the SSO with. Once this user will be mapped for System a tick image will appear in front of the user. This means that the User is mapped for the SSO with the System you have created.

I hope this helps you in solving the problem.

Regards

Pravesh

PS: Please consider rewarding points.

<b>>>Okay, so from what i understanded from you guys is that if i install a package like ESS and assign the system to use SAPLOGINTICKET in user managment, create an employee role and add a user who already exists on the R/3 system on the portal and add him to the employee group i dont need to do any mapping and as soon as i logon the same user name and password will be used to login into the R/3 backend???</b>

Yes you understood it right. Thats what SSO is meant for and thats the procedure for implementing it.

Message was edited by: Pravesh Verma

[Former Member]

Thank you very much

im sorry as i recieved the other message before yours i dont know how.

neways the method u mentioned worked just fine

but canyou tell me how can i check the log files if i wanted to do so?

[former_member200748]

Hi Ahmed

So finally you have got the application running, eh? Great!

Well for future reference, the location of the log file on your server.

<Directory>:\usr\sap\CP1\JC00\j2ee\cluster\server0\log\DefaultTrace

Hope that helped

Best Regards

Priya

[pravesh_verma]

Hi Ahmed,

<b>>> For getting the Log files:</b>

You can see it through the Log viewer. When you start <b>Visual Administrator</b>, you will see the <b>Log viewer</b> there as well.

Also you can get the trace file from <b><your_installation_drive>\usr\sap\<System_ID>\JC00\j2ee\cluster\server0\log.</b>

Regards

Pravesh

[Former Member]

How can i check the log file i cant seem to find any.

[former_member200748]

Hi Ahmed

Have you try out what I have suggested? I once happened to get the same error and managed to resolve it using the method that I have mentioned above. Do try out and let me know if that worked.

Best Regards

Priya

[Former Member]

im trying to do the user mapping however i keep getting this error message

Portal Runtime Error

An exception occurred while processing a request for :

iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_mapping/com.sap.portal.userMappingAdmin/com.sap.portal.userMappingAdmin

Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin

User Mapping not fully available..

Exception id: 12:51_13/10/05_0002_23603650

See the details for the exception ID in the log file

[former_member200748]

Hi Ahmed

Here's the solution to your problem.

Go to System Administration -> System Configuration -> UM Configuration Direct Editing.

You have a parameter called ume.usermapping.unsecure.

Set the parameter to <b>True</b> and restart the cluster again. Also check out this SAP Note 796540.

Your application should run perfectly this time.

Hope that was helpful

Best Regards

Priya

Message was edited by: Priya Ramamurthy

[pravesh_verma]

Hi Ahmed,

Please check the log file, trace file and see whats the exact error when you do the user Mapping.

Also take care that you have the <b>User Administration, System Administration</b> roles with you while you are mapping the users with the system.

Regards

Pravesh

[Former Member]

Okay, so from what i understanded from you guys is that if i install a package like ESS and assign the system to use SAPLOGINTICKET in user managment, create an employee role and add a user who already exists on the R/3 system on the portal and add him to the employee group

i dont need to do any mapping and as soon as i logon the same user name and password will be used to login into the R/3 backend???

[Former Member]

Hi Ahmed,

You can check while creating the system itself. Select the option connection tests in the drop down. there you can check various connection parameters which you have given, while creating the system.

hope this helps.

regards,

Vinod.

[former_member200748]

Hi Ahmed

Single Sign-On (SSO) is a key feature of the Enterprise Portal that eases user interaction with the many component systems available to the user in a portal environment. Once the user is authenticated to the enterprise portal, he or she can use the portal to access external applications. With SSO in the Enterprise Portal, the user can access different systems and applications without having to repeatedly enter his or her user information for authentication. SSO eliminates the need for repeated logons to individual applications after the initial authentication at the enterprise portal.

The Enterprise Portal SSO mechanism is available in two variants depending on security requirements and the supported external applications:

1. SSO with SAP logon tickets

2· SSO with user ID and password

For further information on SSO, you can refer to this link.

http://help.sap.com/saphelp_nw04/helpdata/en/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm

Hope that was helpful

Best Regards

Priya

[pravesh_verma]

Hi Ahmed,

SSO mean Single Sign On. This means that If you configure SSO for different System/applications then you need not Sign in again and again for loggin to different applications/systems.

Lets take two different system for which you are configuring the SSO. <b>System-1</b> and <b>System-2</b>, these systems can be anything (for eg: Portal and SAP System). If you login to Enterprise portal by providing the user name and password then you need not provide the username and password fopr logging to SAP system if you have configured SSO between them.

I hope this helps you!! If any more information required then please revert back.

Regards

Pravesh

PS: Please consider rewarding points.