we've got an Neptune application (basically a BSP that is running on an ICF node) that is called upon SSO authentication through SAP portal. In intranet the application works well. outside the intranet we've got a page not found. The problem is that after getting the SSO ticket the browser make a call to the ICF node url that is not publicly available. So the question: should the its url be made publicly available or there is a solution for this ?