SAP Enterprise Portal Integration with Infoview (Single Sign On)

[Former Member]

Hi

Is it possible to link the Infoview from the SAP Portal and then the Infoview opens with a Single Sign on and from thereon the user navigates through the folders and accesses the objects that he is authorized to do so ?

We have done the following things :

1. Installed BOXI 3.0 along with SAP Integration Kit.

2. Imported the roles into the BOE.

3. Created the Crystal Reports and deployed on the BOE.

4. Applied Authorization on object and folder level.

Any help is greatly appreciated !!!

Thanks and regards

Kamal

[IngoH · Accepted solution]

Hi,

- the portal and the underlying SAP system need to be configured as trusted systems

- are all machine names involved fully qualified ?

- R/3 and BW are setup to accept tickets ?

ingo

[Former Member · Accepted solution]

>

> Hi,
> 
> - the portal and the underlying SAP system need to be configured as trusted systems
> - are all machine names involved fully qualified ?
> - R/3 and BW are setup to accept tickets ?
> 
> ingo

*sigh,* we missed that very simple part between portal and underlying SAP system

Thanks, Ingo!

[IngoH]

Hi,

so whats the behavior that you seeing ?

- you leverage a URL iView with the fully qualified name in the iView to call InfoView ?

- the SAP Authentication is configured and the BI system is set to be the default system in the options ?

- items mentioned by Mike have been changed ?

Ingo

[Former Member]

Hi Ingo

Please see my replies below [Kamal]

so whats the behavior that you seeing ?

[Kamal] - Once the iview is accessed its pointing to the login screen for the credentials.

- you leverage a URL iView with the fully qualified name in the iView to call InfoView ?

[Kamal] - Yes the server name is specified in a fully qualified name as shown below :

http://rtdev02.dev.gov.sg:7001/InfoViewApp

- the SAP Authentication is configured and the BI system is set to be the default system in the options ?

[Kamal] - Yes the SAP Authentication is configured and the roles are imported for the user which has logged in from the SAP Portal.Also under the options tab the default entitlement systems has been selected in CMC.

- items mentioned by Mike have been changed ?

[Kamal] - Yes the items are changed as well

Thanks and Regards

Kamal

[Former Member]

For the SSO, You have to install the SAP Cryptographic Library.

To integrate the Infoview in SAP portal, you must install some patches to the SAP Portal and bind via the template BO of an "iview".

Please look at the documentation provided for the integration kit.( Everything is explained for the SSO)

Selvam.

[Former Member]

Hi Selvam

Are you talking about the SAP Installation guide ? Nowhere it is mentioned related to cryptographic library unless a place where in SAP server-side trust is required.

Regards

Kamal

[IngoH]

Hi,

- you need to configure the SAP authentication on the BOE Server

- you need to configure the default system in the option dialog

- you need to import the users and roles

- all machines need to be in the same domain

- you need to make sure the BI system accepts the tickets

- you can then integrate InfoView into the portal via SSO

Ingo

[Former Member]

Hi Ingo

Thanks for reply.Everything mentioned has been done.Infact when we create an iview pointing to a report to Business Objects single sign works as well.

But what we trying to do is create an iview that points to the infoview directly instead of a crystal report.Hope I am clear this time.

Regards

Kamal

[IngoH]

Hi,

so whats the problem you facing ?

In case everything is done you should be able to take the InfoView standard URL and put it into a URL iView.

make sure the default system is set in the Options for the SAP Authentication

Ingo

[Former Member]

Hi Ingo

we are trying to use the following url in the URl iview and its pointing us to the login screen again:

http://rtdev02.dev.gov.sg:7001/InfoViewApp/listing/main.do?appKind=InfoView&service=%2FInfoViewApp%2....

Have selected the authentication scheme as default in the url iview.

Regards

Kamal

[IngoH]

Hi,

are all the machines in the same domain ?

the URL should just be http://server:port/InfoViewApp

ingo

[Former Member]

Hi,

You are missing one additional step for SSO to work from the Portal to BOE.

go to the location where InfoviewApp is deployed on the BusinessObjects Enterprise Java application server. By default this is Tomcat and it is in the following location:

Open web.xml and verify that the following 3 parameters have the following values:

Siteminder.enabled is false

SSO.enabled is true

Authentication.default is SecSAPR3

Once this is done, restart you Java application server on the BOE machine and now SSO should work.

Also make sure your SAP EP and BOE Java App server are on the same domain for the SAP token to be accepted.

thanks,

Mike

[Former Member]

Hi Mike

The Webserver used is WebLogic 10.0.Both the Weblogic server and the SAP Portal are indeed in the same domain.This has to be since an iview created pointing to a report in BOE works fine with Single Sign On.

The settings in the web.xml have been made and the server restarted as per your suggestions but still the issue persists.

Regards

Kamal

[Former Member]

Hi Ingo

Yes all the servers are indeed under the same domain and have tried to use the url suggested by you.But still the logon page appears.

Regards

Kamal

[Former Member]

Hi Ingo

Finally we are able to point to Infoview through Single Sign On.The issue was the CMS was set default without the fully qualified domain name.But when we navigate through the folders we are constantly getting the error as :

*An error has occured: A Timeout error has occured*. Any idea what could be the issue ?

Also need to know if its possible to point to a default folder when opening an Infoview instead of HomePage.

Thanks

Kamal

[Former Member]

Hi Ingo,

we have everything done that is mentioned.

How do we enable SSO between SAP EP and BOE (InforView) ?

Regards

Thomas

[IngoH]

Hi Kamal,

are you embedded InfoView directly into an iView or are you running it from a separate windows ?

could you try if that would make a difference ?

thanks

ingo

[IngoH]

Hi Thomas,

- you need to setup the SAP Authentication on the BOE Server

- you need to have the SAP users and roles imported

- all machines need to be in the same domain

- see the additional items in this forum entry from Mike S

ingo

[Former Member]

>

> Hi Thomas,
> 
> - you need to setup the SAP Authentication on the BOE Server
> - you need to have the SAP users and roles imported
> - all machines need to be in the same domain
> - see the additional items in this forum entry from Mike S
> 
> ingo

Hi all (specially Ingo) ,

steps 1 to 3 are done and checked. We are able to create CR on BW and export them to BOE and log in BOW with an SAP account to see/check them. Actually just as you demonstrated in your seminar.

What we are wondering is: If the R3/BW AND BOE systems have the certificates installed .. Does the EP (same machine as the r3/bw) also need a dedicated ticket to avoind the following:

The case is that we created an Iview within the EP and when we execute a preview we get to to the InfoView and have to log in again. Is that really a SSO issue on the BOE side (via the web.xml) ?

Cheers and thanks

Ralf

[Former Member]

Hi Ingo

The error is not frequent once you restart both the BO and Web Servers but then after sometime its still keeps happening.Have tried both in same window and new window.But still the same issue.

Have logontoken.enabled set to false to disable the cookie logon.

Regards

Kamal

[IngoH]

Hi,

what do you mean ? the portal is creating a cookie and you need to allow it in your browser

ingo