Skip to Content

AD SSO with entry point for SAP users....

A client would like to use Active Directory (AD) Single Sign On rather than SAP for authentication purposes. There are two potential scenarios we would need to support:

Scenario 1, access to SAP BW (General Ledger, Profit Centre Accounting) and relational systems. There would be no security restrictions at the database level (OLAP and relational). The majority of users would access data from this scenario.

Scenario 2, access to HR SAP BW OLAP cube. SAP Security roles would be enforced.

Scenario 1 user and a scenario 2 user are not mutually exclusive. Therefore an HR user could have the rights to query a relational system or a non HR SAP system. Second, not all users in Scenario 1 will have an SAP account, but they will need to access non HR SAP data. Valero does not want to create new SAP accounts for these people.

I see two possible solutions:

1. Create two infoview entry points (eg different ports). One for AD SSO, the other for a SAP challenge and response. We used to have two infoviews in XIR2 when we deployed the SAP integration kit. How would I do this in 3.1?

2. Use Server Side Trust and SNC.

Can anyone offer any opinions of ideas?

Thanks,

Steve

Edited by: Steve Bickerton on Dec 17, 2008 5:43 PM

Add a comment
10|10000 characters needed characters exceeded

Related questions

1 Answer

  • Best Answer
    Posted on Dec 18, 2008 at 05:02 PM

    The passwords don't match between SAP r3 and SAP BW. This means that server side trust and SNC is the only option.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.