SAP Basis For Beginner - How To Configure Single Sign On (SSO) Between SAP GUI (Backend System) and Portal (Front End) PDF

2/26/2016
SAPBasisForBeginner:HowtoconfigureSingleSignOn(SSO)betweenSAPGUI(backendsystem)andPortal(Frontend)
SAPBasisForBeginner
...Tutorials,tipsandtricksaboutmyexperienceswithSAPBasis...
Home
Systems
Authorization
Database
Reporting
ABAP
About
Search
Thursday,26September2013
FollowbyEmail:
HowtoconfigureSingleSignOn(SSO)betweenSAPGUI(backendsystem)andPortal
(Frontend)
Emailaddress...
Submit
HowtobypassthesecondlayerofloginauthenticationwhenaccessingportalfromSAPGUI.
Scenario:
OncetheSAPSolutionManagerinstallationcomplete,accessof"SOLMAN_WORKCENTER"throughSAP
GUIwouldrequireadditionallevelofloginauthenticationonalltheportalfeatures.
Example:
>>Howtosubscribeto
Flipboard/RSS<<
BlogArchive:
2015(3)
1)Additionalauthenticationrequired
2014(19)
2013(71)
December(2)
October(1)
September(10)
Administration:Codeto
enabletheedit
optionfor...
HowtoconfigureSingle
SignOn(SSO)
betweenSAP...
Howtoexecuteorrun
J2EEEngineVisual
Administr...
Troubleshoot:Common
issuesorerrorson
accessing...
2)Portalloginscreen
InstallationofSAP
SolutionManagerin
Windowspl...
Howtotroubleshoot
SAProuter
connectivityissue...
HowtoopenSAP
systemconnection
forSAPGlobalS...
RunningSAPLoad
GeneratorSGEN
afternewinstalla...
Howtochangethe
messageinSAPGUI
logonscreen
3)Portalmenu
Oracle:Howto
determinetotal
memoryassigned
for...
August(8)
July(15)
http://www.sapbasisforbeginner.com/2013/09/howtoconfiguresinglesignonsso.html
1/23
2/26/2016
June(35)
PopularPosts:
Installationof
SAPSolution
Managerin
Windows
platform
compatiblewith
Amazon/AzureCloud/
HyperV/Standaloneserver
TheSAPSolutionManager
7.1installationstepsbelow
suitableonallWindows
serverenvironmentincluding
AmazonWebServices
(AWS),Micros...
ThisadditionalloginlevelcanbeovercomewiththeintegrationofSingleSignOn(SSO)bysettingupatrusted
relationshipbetweenthebackendsystemandtheportal.
StepstoconfiguretheSSOintegrationbetweenbackendsystemandfrontendportal:
A)FrontEnd:Exportcertificatefromportal
1)LogintoVisualAdministrator
RefertoHowtoexecuteorrunJ2EEEngineVisualAdministrator
SAPIDES
ECC6
Installation
GuidesInThe
Cloud
SAPIDESInstallationwith
AmazonWebServicesAWS
AWSAMISetupand
Configurations:*AWS
accountbereadyand
estimatespendingo...
Howto
configureSingle
SignOn(SSO)
betweenSAP
GUI(backend
system)and
Portal(Frontend)
Howtobypassthesecond
layerofloginauthentication
whenaccessingportalfrom
SAPGUI.Scenario:Oncethe
SAPSolutionManager
instal...
Howtodisplay
SAPprofile
parameters
Exampleto
displaytheSAP
parametersA)Toshownall
theparameterswithTCODE:
SE381)ExecuteTCODE:
SE38andexecuteprogram:
RS...
2)SelectCluster:Server>Services>KeyStorage>Runtimetab>Views:TicketKeystore>
Entries:SAPLogonTicketKeypaircert>Click"Export"button
Administration:
SystemCopyvs
SystemRefresh
WhatisSystem
Copy:Tobuild
aSAPsystemsimilarto
Productiondata1)
Homogeneoussystemcopy:
sourceandtargetsystem
usingthesame...
Creating
Transport
Requestfor
Roles(DEV>
QAS>PRD)
Createthetransportrequest
TRStep1:In"PFCG",verify
theRolenamethatwillbe
usetocreatethetransport
package(TR)...
RunningSAPLoad
GeneratorSGENafternew
installationorupgrade
2/23
2/26/2016
WhatisSGEN?
InnewSAP
Systemsno
ABAPis
compileduntilit
iscalledforthe
firsttime.Eachtimeauser
startsanuncompiledABAP...
Troubleshoot:
Commonissues
orerrorson
accessing
3)Savethefileonthebackendserver(SAPsystem)
"SOLMAN_WORKCENTER"
inSAPSolutionManager
Someofthecommonissues
thatmightappearafterthe
newlyinstallationofSAP
SolutionManagerwhile
executingTCODE:
"SOLMAN_WORKCE...
ExtractingUsers
Assignment:
RolesTCODE
ObjectValue
WithSQVI
ExtractingUsersRoles,
TCODE,Object,Value
AssignedNewtoSAP
authorizationandcometoa
situationwhereyouwould
wantperformanalys...
Howto
troubleshoot
SAProuter
connectivity
issueand
renewofthe
SAProuterCertificate
Inthisexampleitwillshown
thestepsonhowto
troubleshoottheSAProuter
connectivityissueandthe
waytorenewtheSAProuter
certifi...
AboutMe:
EddieLee
4)Enterfilename.Ex:portal_sid_certificate.crt
JointheITera
since2002as
developer
(Java,MSVB
and.NET),SystemAnalyst,
SystemAdministratorand
landingintheSAPWorld.
Pleasefeelfreetoemailme
anycommentorfeedbackto
administrator@sapbasisforbe
ginner.com
Viewmycompleteprofile
B)Backend:Createauser"SAPJSF"
1)ExecuteTCODE:SU01>displayuser:SAPJSF"(ifusernotexistcreateanewuser,usertype:system)
C_TADM51_70Technology
AssociateSystem
Administration(OracleDB)
withSAPNetWeaver7.0
3/23
2/26/2016
13229visitors
Feb.01stFeb.29th
LIVE
ClicktoEnlargeMap
WebHosting
106,286Visitors:5Jun2013
7Jun2015
2)Assignroles"SAP_BC_JSF_COMMUNICATION"and"SAP_BC_USR_CUA_CLIENT_RFC"
65,518Visitors:8Jun2015
3Feb2016
VisitorUpdate:
3)Check"icm/host_name_fullparameter"beenconfiguredcorrectlyinDefaultprofile
4)ExecuteTCODE:RZ10toensureparameterfor"login/accept_sso2"_ticketand"login/create_sso2_ticket"are
readyorcreateitifnecessary
4/23
2/26/2016
5)SelectInstanceprofile
LiveTrafficFeed
AvisitorfromNoida,India
viewedSAPBasisFor
Beginner:Administration:...
AvisitorfromHyderabad,
19secsago
IndiaviewedSAPBasisFor
Beginner:LockEntries
AvisitorfromGurgaon,
Man...2minsago
Haryanaviewed"SAPBasisFor
Beginner:Howtoconfigure
SingleSignOn(SSO)between
SAPGUI(backendsystem)and
Portal(Frontend)"3minsago
AndhraPradeshviewed"SAP
BasisForBeginner:
Troubleshoot:Commonissues
orerrorsonaccessing
"SOLMAN_WORKCENTER"
AvisitorfromPune,
inSAPSolutionManager"5
Maharashtraviewed"SAPBasis
minsago
ForBeginner"9minsago
AndhraPradeshviewed"SAP
BasisForBeginner:
IntroductiontoSQL
Quickviewer(SQVI)
AvisitorfromMhlhausen,
AlternativetoSE16"11mins
BadenWurttembergviewed
ago
"SAPBasisForBeginner:
RunningSAPLoadGenerator
SGENafternewinstallationor
AvisitorfromParis,Ilede
upgrade"12minsago
Franceviewed"SAPBasisFor
Beginner:HowtocreateHR
AdhocquerywithSQ01,SQ02,
AvisitorfromReykjavk,
SQ03"14minsago
Gullbringusyslaviewed"SAP
BasisForBeginner:SAPIDES
ECC6InstallationGuidesIn
AvisitorfromHoChiMinh
TheCloud"19minsago
City,HoChiMinhviewed
"SAPBasisForBeginner:
Administration:Howtounlock
&resetSAP*userinOracle"20
AvisitorfromMedelln,
minsago
Antioquiaviewed"SAPBasis
ForBeginner:Howtoshutdown
andstartupOraclemanually"36
AvisitorfromMumbai,
minsago
Maharashtraviewed"SAPBasis
ForBeginner:Howto
troubleshootforSAPsecurity
logmissinginSM20"37mins
ago
5)Click"Extendedmaintenance"and"Change"button
Realtimeview
GetFeedjit
TotalPageRefresh:
613,310
6)Ifthe2parametersnotavailable,Clickthe"Parameter"icontocreateit
5/23
2/26/2016
SAP questions?
7)EnterParametername:login/accept_sso2_ticket,Parameterval:1andclick"Copy"button
TIMOTHYTIAH'SBL
OG:
What Apps Are

On My Home
Screen?
126,479VIEWS
8)EnterParametername:login/create_sso2_ticket,Parameterval:2andclick"Copy"button
6/23
2/26/2016
49%
Rs 2,699
66%
9)Makesuretheparametersarecorrect
Black Solid Round Neck

Sweater
49%
Solid Blue High Neck

Sweater
10)Savetheprofile
11)RestarttheSAPsystem
7/23
2/26/2016
12)Restartwithsapmmc
13)Click"OK:
8/23
2/26/2016
14)Waitforthereboot
C)Backend:Importthefrontendcertificatecreatedearlier
1)ExecuteTCODE:STRUSTSSO2
9/23
2/26/2016
2)Click"Certificate">"Import"
3)Click'Binary"andSelecttheportalcertificatecreatedearlier
4)Clickthe"tick"button
5)Click"Allow"
10/23
2/26/2016
6)Certificateimportedsuccessfully
7)Click"Addtocertificatelistandcontinueclickingonthe"AddtoACL"button
11/23
2/26/2016
8)EnterSystemID:J2E,Client:000
9)NewentrycreatedattheLogonticketsection
10)Click"Save"button
12/23
2/26/2016
D)Backend:Exportcertificate
1)Clickthe"Export"button
2)Select"Binary"andenterfilenameex:abap_backend_certificate.crt(tobeimportintofrontendserver)
13/23
2/26/2016
3)Click"OK"
E)Frontend:CreateaJCoRFCprovider
1)ExecuteTCODE:SMGWandmarkdowntheLUName,TPName
2)SelectCluster:Server>Services>JCoRFCprovider>Runtimetab>Bundlestab>
Registeredserver
EnterProgramId:sapj2ee_port,Gatewayhost:LUName,Gatewayservice:sapgw00,
ServerCount(1..20):1
3)ClickRepository:SpecifyApplicationServer
Enter:Applicationserverhost:LUName,Systemnumber:00(accordingtotherelevantSAPsystem),
Client:000(accordingtotherelevantSAPsystem),Language:EN,User:SAPJSF,
Password:masterpasswordcreatedduringinstallationorpasswordresetforuser:SAPJSF
Click"Set"button
14/23
2/26/2016
F)Frontend:Addbackendtosecurityproviderslist
1)Selectcluster:Server>Services>SecurityProvider>Runtimetab>PolicyConfiguration>
Components:ticket
Clickthe"Pencil"buttontoswitchtoeditmode
2)SelectAuthenticationtab>"com.sap.security.core.server.jaas.EvaluateTicketLoginModule"
ClickModify"button
15/23
2/26/2016
3)Enterthefollowingdetails:
Name:ume.configuration.active,Value:true
Name:trustedsys1,Value:SID,Clientnumber
Name:trustediss1,Value:CN=SID
Name:trusteddn1,Value:CN=SID
Click"OK"button
4)Selectcluster:Server>Services>SecurityProvider>Runtimetab>PolicyConfiguration>
Components:evaluate_assertion_ticket
SelectAuthenticationtab>"EvaluateAssertionTicketLoginModule"
Enterthefollowingdetails:
Name:ume.configuration.active,Value:true
Name:trustedsys1,Value:SID,Clientnumber
Name:trustediss1,Value:CN=SID
Name:trusteddn1,Value:CN=SID
Click"OK"button
ClickModify"button
16/23
2/26/2016
G)Frontend:Importthebackendcertificate
1)SelectCluster:Server>Services>KeyStorage>Runtimetab>Views:TicketKeystore>
Entries:SAPLogonTicketKeypaircert>Click"Load"button
2)Selectthe"abap_backend_certificate.crt"thatcreatedfromthebackendsystem
3)Thecertificateimportedsuccessfully
17/23
2/26/2016
4)Click"Yes"toexittheVisualAdministrator
5)RestarttheSAPsystemwithsapmmc
H)Backend:CreateandtesttheRFCconnection
1)ExecuteTCODE:SM59>Select"TCP/IPConnection">Click"Create"icon
18/23
2/26/2016
2)EnterRFCDestination:RFC_TO_PORTAL,ConnectionType:T,ProgramID:sapj2ee_port
3)EnterGatewayhost=LUName,Gatewayservice:sapgw00
19/23
2/26/2016
4)Saveandtesttheconnection
5)Connectionisready
20/23
2/26/2016
I)Logintoportal
1)ExecuteTCODE:SOLMAN_WORKCENTER
2)Thesecondlayerauthenticationloginscreenwillbebypass
3)ThatallfortheSSOintegrationbetweenbackendsystemandfrontendportal
ErrorimportingFrontend:Importthebackendcertificate(sectionG)
1)Sampleerrorappearduringtheimportprocess
21/23
2/26/2016
2)Renamethefilenametoashorterfilename
3)Theimportofthecertificatewillbesuccessful
PostedbyEddieLeeat6:30:00pm
Recommend this on Google
Labels:Administration,Maintenance,SolutionManager,Troubleshooting
5comments:
Anonymous Wednesday,February12,20146:09:00pm
Niceone...!!Thanks.
Reply
Anonymous Tuesday,April22,201412:19:00am
GoodDocument...Thanks
Reply
22/23
2/26/2016
Reply
Anonymous Thursday,May08,201411:26:00pm
thanks...veryhelpfulmasterdocument
Reply
Anonymous Wednesday,July09,20143:59:00pm
Nicelydone..Thanks
Reply
Anonymous Tuesday,November25,20149:47:00pm
awesome!
Reply
Enteryourcomment...
Commentas:
Publish
Unknown(Google)
Signout
Notifyme
Preview
NewerPost
Home
OlderPost
Subscribeto:PostComments(Atom)
TIMOTHYTIAH'SBLOG:
What Apps Are On My Home Screen?

126,479VIEWS
Alloriginalcontentiscopyrightedbytheauthor.Allrightsreserved2013
PictureWindowtemplate.Templateimagesbyblue_baron.PoweredbyBlogger.
23/23

SAP Basis For Beginner - How To Configure Single Sign On (SSO) Between SAP GUI (Backend System) and Portal (Front End) PDF

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

SAP Basis For Beginner - How To Configure Single Sign On (SSO) Between SAP GUI (Backend System) and Portal (Front End) PDF

Caricato da

Copyright:

Formati disponibili

2/26/2016

What Apps Are

Black Solid Round Neck

Solid Blue High Neck

Recommend this on Google

What Apps Are On My Home Screen?

Potrebbero piacerti anche