cancel
Showing results for 
Search instead for 
Did you mean: 

what is the advantage of SSO Using Logon tickets than SSO using Uermapping.

Former Member
0 Kudos

Hi,

Question1 .

i want to know the main advantages of SSO using SAP logon Ticket than SSO using UID/PW .

here i want to know in what caes i can go for each .

Question2.

i have around 10,000 users in Portal and only 1000 users are there in Backend system to which i need to get access for all 10,000 people and only for 1000 people only have the licence ( beacuse to get licence for 10,000 usrs it will be very cost to the company).

how 10,000 users can get the access to my backend ?

Question3 .

is there any way (automatic ) assignment of group of users at a time we can do the SSO or Role assignment ?

ponits will be awarded for the best answers

Regards,

Govindu

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Govindu ,

Its always recommended to enable SSO with Logon tickets , User Mapping should be the last resort . Thats because user mappings have some security issues .

No matter how huge is the user base , SSO with logon tickets will take care of everything . If you have Identity Management enabled in your organisation, assigning the backend roles to end users wont be an headache , especially when the number of users is large .

Regards

Mayank

Former Member
0 Kudos

Hi mehta,

could you provide me any links or docs for doning the above tasks like assigning large no of usesr to backend at single shot

and the group assignment process

Regards,

Govindu

Answers (3)

Answers (3)

Former Member
0 Kudos

Hi Govindu,

1) SSO Logon Ticket - This method is used whn there are User exists in both the front and back end system are present with the same User id's. i.e, the user name for the front end and backened are same then if we configure the SSO with logon tocket then a ticket will be issued with the User ID of the front end in the portal and whne user tries to logon to back end system from the portal SSO ticket is interpreted and looged in if the same User with the user id existis.

SSO User Mapping - This is the case which is more suitable for you case where there are less number of back end users . In this method we will map the Front end user to the back end user. It is like hard coding the username and password in the user mapping.

2) You can divide the users based upon the roles that they are and add the user mapping to the Users profile.

Thanks,

Raju Bonagiri

Former Member
0 Kudos

Q1

SSO using SAP Logon Ticket - Userand passwords are same for bothe backend and user repository then this option will be used

SSO using UID/PW - If the uerid/passwords are not same then this options is used

Q2

You can create one service user in the backend and do the admin level user mapping fot the portai in the front end with the option of SSO with userid/pwd

Q3

All the backend roles can be synced to the Portal

Former Member
0 Kudos

Hi Govindu

1. User Mapping with Logon Ticket is the best practice and its a one time activity. You just have to download the Portal certificate to the backend system once and for all the mapping to all the user id if the same exist in the backend.

2. It is not best practice to map many portal users to one backend Id. If you are planning to implement ESS MSS then this scenario will not help at all.

3. If you are doing SSO with logon ticket then the user mapping is done automatically.

Regards

Sasha.