How to use EP over internet and intranet simultaneously

[ManishSBIFM]

Hello Expert

we have deployed web dispatcher in front of our EP system to expose it from internet ,for this we changed the system object WAS/ITS to web dispatcher hostname.

the web dispatcher is working fine over internet as well as intranet

but when we are accessing the EP link http://hostserver:5XXX1/irj/portal from local system it is giving error and asking for ECC userid password .

we have configured the SSO and it is working fine when not using web dispatcher config .

my question is can we use the SAME portal by web dispatcher and local link (http://hostserver:5XXX1/irj/portal) simultaneously ?

[Matt_Fraser]

Hi Subhojit,

Yes, you should be able to access a single portal either directly or via Web Dispatcher using SSO in both cases. If it's not working, one possible cause might be the use of different domain names. For instance, if internally you call the portal via the URL https://portal.intranet.corp:50001, but externally use the web dispatcher at https://dispatcher.company.com (note the different domain), that might be part of the problem. If you're using spnego for SSO, then the domain should show up as a "realm" for configuration.

In my organization, we have spnego SSO enabled for our portal, and we have a web dispatcher in use, though it's not externally exposed. However, we have all traffic go through the dispatcher -- no one (except me, when troubleshooting) accesses the portal directly. Even so, the portal and dispatcher are in the same domain (realm), so their relative addresses are like https://portal.company.com:50001 and https://dispatcher.company.com.

You can find more details about how I set this up in my blog at https://blogs.sap.com/2016/02/08/single-sign-on-for-java/ (now about a year old, and written for 7.01, but with some details about where to find equivalent configurations in 7.1+).

Cheers,
Matt

[ManishSBIFM]

Thank Matt

we have our internal and external domain different for web dispatcher and EP system

ill get back after changing the domain for web dispatcher and make it same as EP system

on more thing we are using a global wild card SSL cetificate for web dispatcher .

regards