Configuring SSO with logon tickets with third party applications

[Former Member]

Hi

I want to know if we can configure SSO with logon tickets with third party applications.

if yes how can we do that?

Regards

Ajay

[former_member192029]

Hi

Here you go

http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/security/s-u/using sap logon tickets for sso to microsoft-based web applications.pdf

forum

/thread/11711 [original link is broken]

DEMO

https://www.sdn.sap.com/irj/sdn/developerareas/ep?rid=/webcontent/uuid/110ff05d-0501-0010-a19d-95824...

Cheers

Jawahar Govindaraj

PS:Reward pts

[Former Member]

Hi,

Thanks for the response...

i am trying to add sdn link im my portal for this i have created an URL iView and created an HTTP system for the same and i am trying to do the user mapping for all the users in the portal...

i am getting the error "Can't read the prameter 'siteString' from the PCD.." can any one plz help me in solving this ...

Regards

Ajay

[Former Member]

To futher this point, not only are the passwords not the same (when using UIDPW - and UserMapping you have to provide both) but the ID's are not too. Most corps would hvae a naming convention like jmaizels or maizelsj (etc...) whereas people have their accounts on the Mail sites as "Flash" and "hotmail9999", so the external application would not even be able to identify the person - by ID or password

So, to answer your question - the Yahoo! mail system cannot be integrated without it knowing who the user is.

Kind regards,

Judson

[Former Member]

Hi Ajay,

It's the process of UserMapping for each user individually. They probably have different ID's and Passwords from that of the Internet sites like Yahoo! just based on the fact that there are corporate standards with respect to password policies and for that matter - password change rules will continually keep it out-of-synch and complicated for the end users.

Generally, each user would know their Yahoo! Mail account ID and Password and would apply it themselves, using the Personalize ==> UserMapping option on the Masthead.

UserMapping can be done by the administrator but like you said there could only be one ID and Password then and they would all see the same mailbox. In this application it should be set to "Admin, User" so that the administrator can help them out in a pinch

BUt otherwise, if users have mail accounts on the outside - why would they share one... they should use their own.

There used to be Yahoo! integration features in FCS and EP 5.0, which were able to access selected information from Yahoo! but that was limited unless the user linked their accounts VIA the master account. I don't know if that still exists (I heard that deal + free content was over a while ago).

I hope that this explains,

Judson

[Former Member]

Hi Ajay,

I believe that you can but it's SSO with UserMapping - meaning that the users have to "map" or update the system with the credentials from the external system. There is an option under the Personalize link for UserMapping. Once you have defined the system properly, it will show up in that list...

You can create a URL iView to do this particular feat. I have seen another post on this:

<a href="https://www.sdn.sap.com/irj/sdn/thread?threadID=137144">Yahoo Mail Integration - Forum Message</a>

Otherwise, I have not done it but it's a simple passing of a few parameters to the external app (i.e. Yahoo) and using the UserMapping to store and retrive the credentials when required.

I hope that this helps,

Judson

[Former Member]

Hi,

but if i have to do the user mapping i have to do for each and every user in the portal...this will be a huge process.

If i create a URL iView there we will be passing the user name and pwd for one user and every portal will see the same inbox ,but it should not be the case ,for example if i log in i have to get my inbox if u login u have to get your inbox,this will not happen here only in SAP logon tickets it will happen .

is this right?

For example if i want to integrate the sdn into portal then if i login in to portal and go to sdn from portal i should get by sdn with my login...this is my requirement..

I hope u got my requirement...

Regards

Ajay

[Former Member]

Hi Ajay,

Yes you can configure SSO to non-SAP external applications using logon tickets, you just need to put an intermediate filter in-place.

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm">Single Sign-On to Non-SAP Systems and Applications</a>

Regards,

Judson

[Former Member]

Hi Judson,

Thanks for the information...if u have any additional documentation on this can u plz let me know..

Regards

Ajay

[Former Member]

Hi Judson,

if i want to integrate yahoo mail in my portal using SSO logon tickets is that possible..

Regards

Ajay