Skip to Content
author's profile photo Former Member
Former Member

Leveraging NetWeaver for SSO

My company has 3 seperate SAP environments (2 running SAP 4.7 and 1 running NetWeaver). The NetWeaver environment has been configured to use Kerberos for Single Sign On and all 3 environments have been configured to accept SAP Logon Tickets from each other. Now what I want to be able to do is provide a way for developers to "ping" off of the NetWeaver environment and get the SAP Logon Ticket. For example:

I want to allow SSO to one of my 4.7 environments from a .Net application I have written. Since I don't have a way to get the SAP Logon Ticket from the 4.7 environment, I want to make a call to NetWeaver, have it verify via Kerberos who I am, and send me back a SAP Logon Ticket that I can then use on the 4.7 environments.

What should I setup in NetWeaver to allow this: Create an Iview that could be called from the .Net connector? Create a script on the WAS? I'm looking for simple yet effective here.



Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

1 Answer

  • Best Answer
    Posted on Mar 17, 2006 at 09:14 AM

    If you use the .NET Connector you can use any of the ABAP systems to get a logon ticket via SAPConnection.GetSAPSSOTicket(). You need to authenticate with one of the supported SNC technologies that also include Kerberos. Using a trusted SNC connection and an external User ID is also an option.

    The other possibility is to use the Portal to create a Logon Ticket from another authentication. An arbitrary page should work. Here is a possible order of steps:

    - Impersonate to the user you want to logon.

    - Create a HttpWebRequest to the portal page.

    - Execute the request.

    - Take the Logon Ticket from the MYSAPSSO2 cookie.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.