Is principal propogation possible for .Net->SOAP->PI->XI(ABAP Proxy)->ECC ?

[Former Member]

Hello Experts,

I have a synchronous scenario as :

.Net client -> SOAP -> PI -> XI(ABAP Proxy) -> ECC where functionalities from ECC are exposed as Webservices via PI and consumed by .net client.

For this solution we expect to have a SSO enabled along with Principal propagation(PP) end to end.

For SSO from .net client to PI we have configured SPNego which uses Kerberos Authentication. This part is working fine, we can see in trace files that we have logged on to SOAP Adapter with correct Business User using the logon ticket provided by SPNego module.

I have configured steps needed for PP, but PI system logs in with PIAFUSER instead of actual Business User onto the backend SAP system(ECC) using ABAP proxy.

I could find many blogs/threads on SDN regarding Principal propagation, but most of them are quite old (around 2005 - 2007) or they refer to threads which contradict to each other. Also they refer to SAP 2 SAP scenarios.

Q1.How can we achieve PP for this scenario?

Q2.Has anyone tried this kind of scenario and got it working? Or if anyone knows how this can be implemented successfully?

Q3. Is it possible to have Principal Propagation configured for Non SAP Soap Client via PI to backend SAP system?

Any inputs in answer to above questions/concerns will be very helpful.

Thanks & Kind regards,

Abhijeet.

[Shabarish_Nair]

as long as you meet the criteria of the adapters as mentioned int his link, it should work

http://help.sap.com/saphelp_nw04s/helpdata/EN/45/0f16bef65c7249e10000000a155369/frameset.htm

Also refer: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/50d07121-07a5-2c10-5280-a081de9b8...

[Former Member]

Hi,

Were you able to flow your user thru the entire process?

Thanks!