SSO configuration between SAP BI4.0 and Netweaver 7.3

[Former Member]

Hi All,

We have Windows AD authentication in our SAP BI4.0 environment with SSO configured.

I will be integrating SAP BI4.0 with Netweaver 7.3.

Could you please suggest/provide any links to show how can we achieve SSO between Netweaver and BI4.0.

I have gone through couple of links and I understand the procedure to integrate Netweaver with BI4.0.

I want to know how can I achieve SSO between Netweaver and SAP BI?

Regards,

Richa Pathak

[Former Member · Accepted solution]

Hi richa,

please refer the below thread.

http://scn.sap.com/thread/3419514

let me know if you need any additional details.

[Former Member · Accepted solution]

Hello Prasad,

Thank you for sharing the link:

I have one questions: As per note 1701240, prerequisites:

1) Setting up profile parameters in SAP system to accept and create logon tickets (Does it refer to enabling SAP authentication in SAP BO CMC, if not please suggest how to achieve this)

Regards,

Richa Pathak

[Former Member · Accepted solution]

Hi Richa,

Yes, Configuring SAP Authentication in BO CMC is a part of the #1

In Addition to that please check the below on SAP BI Side

SAP Logon Ticket is one of the Authentication method. Please check the below url.http://wiki.scn.sap.com/wiki/display/ASJAVA/SAP+Logon+Ticket+-+Introduction

check the  Configure Profile parmaters in the above url.

For the scenario where you want to use SSO based on tickets with the BusinessObjects Enterprise and the BI System (either from the SAP GUI or via the SAP Enterprise Portal) you need to configure profile parameters in the SAP BI System.

The two profile parameters are:

    login/accept_sso2_ticket

    login/create_sso2_ticket

[Former Member · Accepted solution]

Thank you Prasad,

I have a question:

If SAP BI 4.0 is on Enterprise Authentication and we integrate it with Enterprise Portal (ECC).

Is it possible to achieve SSO between these two systems through certificate exchange?

Regards,

Richa Pathak

[former_member184468 · Accepted solution]

You will need to setup SAP authentication, and then perform user aliasing.  The logon to BI from portal will happen via SAP authentication.

Have a look at this, although it mentions LDAP is is equally applicable to enterprise.

http://wiki.scn.sap.com/wiki/display/BOBJ/How+to+map+SAP+users+and+LDAP+users+in+SBO+BI4.0+CMC

[Former Member · Accepted solution]

Yes, then also we can achieve SSO between  BO and EP. With the Ref of 2nd point Below, we need to have SAP Alias to all the Enterprise users to have SSP between BO and EP.

SSO can be configured in two ways to access the reports from SAP netviewer portal.

1. Win AD + SSO= Please follow the document to configure the same

http://blog.jamiebaldanza.org/wp-content/uploads/2012/04/Crystal-2011-AD-Authentication.pdf.

  2. SAP SSO= Please follow the document to configure the same

http://wiki.sdn.sap.com/wiki/display/BOBJ/BI4+Integration+into+the+SAP+Entreprise+Portal+7.0.x

Hope this answers your question.

[Former Member · Accepted solution]

Thank you Prasad...This has helped me to achieve an SSO, But now when I go to BI Launchpad and I login with my SAP BW credentials I cannot see the folders that were created using Enterprise Authentication in SAP BW.

Could you please suggest what could be the reason/

Regards,

Richa Pathak

[Former Member · Accepted solution]

Your Enterprise ID needs linked with your SAP BW ID, then only BW access (with SAP BW ID) + BO Access ( BO Access).

perform the step 1 and 2 from the below document. this will help you to interlink the Enterprise ID to your SAP ID. Don't perform the 3rd step.

Note: Instead of AD user, you have to use your Enterprise ID.

How to map SAP users and AD users in XI3.1 CMC - Business Intelligence (BusinessObjects) - SCN Wiki

Hope this answers your question. Let me know if you still have any questions.

[Former Member · Accepted solution]

Thank you very much Prasad. You've always been very helpful, quick and have always resolved most of my queries. Thank you for helping.