SSO between two different domains with different ADS

[Former Member]

Hi,

I am supposed to configure SSO between EP and CRM system. but the prob here is both are in different domains and both have their own ADS, but the user IDs are same in both the systems.

can anybody tell me what to do in this case?

[former_member206159]

I dont see any problem here. you need to able to access the CRM domain from portal domain.

SSO using logon tickets will work in your case

Raghu

[Former Member]

we need to mention anywhere the CRM domain name in our EP domain like in Visual Admin/Config tool?

and one more thing is here our connectivity test are failing with a message "SSO failed".

[Former Member]

Hello,

Please check the guide [here|http://help.sap.com/saphelp_nw70/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm] and also SAP Note 654982.

Hope it helps,

Roy

[Former Member]

Roy,

Thankyou very much for giving good link. but here I am not understanding 2 points.

1.In the Prerequisites section he has not mentioned anything like SAP server in the receiver server(is this applicable to SAP server like CRM,BW also..)

2.I am not understanding what is "server with receiver software". Do we need to purchase any third party software fro the same?

you reply is highly appreciated.

[Former Member]

Hi,

Basically you have to have an SAP J2EE engine running on both domains.

Roy

[Former Member]

Hello,

There should not be any problem while configuration of SSO in bet two different domains.

1) Initially the OS team has to configure the trust in bet these two domains so that a user from EP domain can ready the data from CRM domain. There should be two way trust in bet both these domains. Please ask the Os system admin to do so.

2) Then try configuring SSO by normal procedure.

If still you are getting problem then try creating the SAP admin accounts belonging to EP system on CRM system at Os level and add them to administrators group at Os level on CRM system and check again.

Hope it will help you.

All the best...

Manoj

[Former Member]

yes I can understand from the sap doc that EP is required in both sides. the scenario I understood is

1.We will ask the customer to go for one EP box for other domain.

2.We will configure SSO between these two EP boxes (i.e Federated Portal)

But how the users will be authenticated to CRM server which is in another domain?

We we need to configure in between new EP box and CRM server?

could you please clarify my doubt!!!!!!!!

[Former Member]

You will need to create trust relationship between the two domains as explained in previous post and link provided by me, please read it through. Please also assign point for useful answers.

Roy