cancel
Showing results for 
Search instead for 
Did you mean: 

Selecting the Security method for a landscape of SAP BW & BOE & SAP EP

Former Member
0 Kudos

Hi,

I am BW Consultant with BOE experience.

But i could not use the Landscape such as SAP BW as Warehouse Solution, BOBJ(WebI, Crystal, Xcelsius) as reporting tool and SAP EP as frontend Portal to view all reports.

Now i am in a project where i am using Landscape mentioned above.

Now the question is in this scenario, what is the best practice for security and SSO implementation.

We have installed the SAP BW and BOE. Also BOBJ Integration kit. Now After installing the BOBJ Integration kit, as a post installation & Configuration step we need to import SAP Users and Roles in CMC for 'SAP Authenticaion'. But at this moment we have not decided any approach about the security.

If i mport SAP Users and Roles in to CMC of BOE, is it possible to use AD/LDAP appraoch in the later stage?

Please suggest me best approach to implement the Security and SSO.

Thanks in Advance

Bala.

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Thanks Ingo for the reply..

One sipmle doubt for me at this stage...

Since just now we have installed the BW and BOE just few days back. what Users and Roles will be available to import in to CMC. Its all about standard Users and Roles. Since i had not worked in the Security, all these confusion.

Last reply actually answered my previous question. Thankyou!

Thanks,

Bala

IngoH
Active Contributor
0 Kudos

Hi,

any roles with users assigned in the BW system will be available in the role import in the BusinessObjects system

ingo

Former Member
0 Kudos

Hey Bala,

Log-in to CMC: (as Admin)

Go to:

Authentication

here you can see : Enterprise, AD, NT , LDAP & SAP.

Map the Users based on their environment. After doing this, you can see how they are differed.

One more just to update you.

When you opt for SAP authentication, in Authentication @ CMC.

You can see Roles tab, there Check Automatically Import Users and Force User Synchronization.

Automatically import users - This checkbox allows you to enable the import of SAP users that are assigned to the roles that have been imported for the SAP entitlement system.

Force User Syncronisation: If you enable this option, each update in the Role import tab will also result in a syncronisation of the assigned SAP users with the corresponding user accounts on you SAP BOE system.

Check OSS note for scheduling this.

https://websmp102.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=1406037&_NLAN...

Hope it helps you a lot.

Thank You!!

Sent from iPhone

Former Member
0 Kudos

Thanks Ingo

If you have any documentation on the Security. Please share me that will help me.

Thanks,

Bala

Former Member

Answers (1)

Answers (1)

IngoH
Active Contributor
0 Kudos

hi,

that depends a little bit on what the customer would like to do. You could use standard SAP SSO starting from the portal to BOE to BW. the other option is as well to use Windows AD or LDAP - which then will require you to use SNC. if you provide some more details then I can provide more details .

Ingo

Former Member
0 Kudos

Thanks for quick reply..

It is up to us to select the Security appraoch. But we should give the better approach.

My confusion as you said, whether both SAP SSO or LDAP/Windows AD will provide same functionality in our landscape?.

And we have installed BOBJ Integration Kit now. Is it mandatory to import the SAP Users and Roles now itself in to CMC?

Thanks in Advace,

Bala.

IngoH
Active Contributor
0 Kudos

Hi,

My confusion as you said, whether both SAP SSO or LDAP/Windows AD will provide same functionality in our landscape?.

>> so that decision depends on each customer's landscape and choice of primary user authentication

And we have installed BOBJ Integration Kit now. Is it mandatory to import the SAP Users and Roles now itself in to CMC?

> yes - even if you decide lets say that Windows AD is your primary user authentication you still will need the SAP credentials

ingo