Implementing SSO for EP-ECC

[jay_b2]

I'm looking for pages that explain different ways for implementing SSO between ECC and EP.. Pl. help with following queries:

1. What is the user mapping scheme generally used ?

2. Is SSL support necessary before implementing SSO or that is independent.

3. After implementing SSO, how do I test it ?

[Former Member · Accepted solution]

Hi Jay,

1. For User Mapping, SAP Logon Ticket method is safe thing to use, as the credentials used to login to the portal should be same as the SAP credentials, hence only authenticated users can logon to the portal.

2. SSL is not mandatory for SSO to be implemented.

3. To check if SSO is implemented correctly,

Go to System Administration Tab, Select Support Desk under Support, Click on SAP Application under Top Level Areas, here by clicking on SAP Transaction or selecting a Tool under "Test and Configuration Tools", SSO can be tested.

By clicking on SAP Transaction and giving the system details, the required transaction can be opened. If it opens without any error then SSO is implemented correctly.

[Kaempfer]

1. What is the user mapping scheme generally used ?

How do the users access your EP and ECC? SAP GUI for Windows for ECC or only via a Web browser to ECC and EP? Depending on your system landscape you have to choose the right SSO technology (SAML, Certificates, SAP Logon Tickets, SPNego for Java ....)

2. Is SSL support necessary before implementing SSO or that is independent.

You should not implement SSO without SSL especially if you decide to use SAP Logon Tickets

3. After implementing SSO, how do I test it ?

This depends on step 1.

Regards

Matthias

[Former Member]

Hello Jay,

1. What is the user mapping scheme generally used ?

When you are implementing SSO, the best thing to use SAPLOGONTICKET for Authentication.
which you need to mention in the System property "User Management".

Please go through followi ng link for more info:-
    http://help.sap.com/saphelp_nw70ehp1/helpdata/en/f8/3b514ca29011d5bdeb006094191908/content.htm

2. Is SSL support necessary before implementing SSO or that is independent.

SSL is totaly independent of SSO.

The SSL (Secure Socket Layer  protocol) is used to secure transactions between java server (EP) and web browsers.This will enable you to use https protocol.

3. After implementing SSO, how do I test it ?

http://wiki.sdn.sap.com/wiki/display/EP/How+do+I+test+SSO

[MaheshKumar]

Hi Jay,

2. SSL is an optional for SSO.

3. To check sso : login into portal with abap user > system administration > support > SAP Application in Test and Configuration tools select SAP transaction and run > select system from dropdown menu > enter any transaction and select gui type> Go.  In portal it will show you the t-code screen.

If you are able to see this screen SSO is configured correctly. Else you will see a login screen or an error.

Regards

Mahesh Kumar

[jay_b2]

Thank you, Can you give me any basic steps that are required for SSO? Anything apart from setting up parameters and defining logon scheme ?

[MaheshKumar]

Hi Jay,

Go through following link

http://help.sap.com/saphelp_ep50sp2/helpdata/en/4d/dd9b9ce80311d5995500508b6b8b11/content.htm

For basic steps go through following doc

http://scn.sap.com/docs/DOC-27905

Regards

Mahesh Kumar