cancel
Showing results for 
Search instead for 
Did you mean: 

SSO Help

Former Member
0 Kudos

I have a J2EE app that connects to a backend 4.7 R/3 system and uses BAPI's to get data. Currently it connects using the JCO.createClient command and user information from user mapping. I need to switch this app over to use SSO. Does anyone have any code examples they can post on how to connect using SSO?

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

How do you get the base64 ticket?

kishorg
Advisor
Advisor
0 Kudos

Hi Eric ,

just go through helps..

i think u have to depend other standard APIs provided by Sun. i dont know it exactly..

But u can implement it through Java Mail API . this encoding is present with Java Mail API. im sure abt that.

<b><b>just use this also

http://jsourcery.com/output/sun/j2se/j2sdk/1.4.2_04/java/util/prefs/Base64.source.html#-1102774838</...;

Regards

Kishor Gopinathan

Message was edited by: Kishor Gopinathan

Former Member
0 Kudos

I already have my systems set up to use SSO. I need java code that I can use to create the JCO connection with SSO as it's authentication method.

kishorg
Advisor
Advisor
0 Kudos

Hi Eric ,

just try these methods from JCO library.

public static JCO.Client createClient(java.lang.String client,

java.lang.String user,

java.lang.String passwd,

java.lang.String lang,

java.lang.String ashost,

java.lang.String sysnr,

java.lang.String gwhost,

java.lang.String gwserv)Creates an instance of a client connection to a remote SAP system (no load balancing) Note: Depending on the SAP system release, logins using Single-Sign-On (SSO) or X509 certificates are being supported.

For SSO specify the user to be $MYSAPSSO2$ and pass the base64 encoded ticket as as the passwd parameter.

For X509 specify the user to be $X509CERT$ and pass the base64 encoded certificate as the passwd parameter.

i havent tried this .. just try using this method..

Full JCO help in ..

-


http://www.huihoo.org/openweb/jco_api/com/sap/mw/jco/JCO.html

Regards

Kishor Gopinathan

kishorg
Advisor
Advisor
0 Kudos

Hi Eric ,

just follow these steps,

Stage 1: Updating the JAAS login module

Step 1: Start up the J2EE Server Engine and Adminstration tool. Log in as 'Administrator' with no password (this is the default installation).

Step 2: Navigate to the Server One - Services - Security dialog window and select the JAAS tab.

Step 3: Select the 'InQMyLoginSystem' from the Available Applications side bar and select the entry labeled 'com.inqmy.services.security.jaas.InqmyLoginModule'.

Step 4: At the bottom of this screen, enter a new Login Module called 'com.sap.security.um.r3.R3AccountLoginModule'. Set the Flag to 'sufficient' and the options to 'userfactory="null" createticket="0" acceptticket="0"'. Click the 'Add' button to apply this entry to the JAAS tab.

Stage 2: Configuring SAP Integration

Step 1: Select the SAP Integration tab in the Security window.

Step 2: Click the 'Configure' button and follow the wizard for creating a new SAP configuration. Be sure to enter a valid system user in the Authentication step. This user will be authenticated against the SAP through JCo. Finally, select 'Auto-detect' from the Single Sign-On step and finish the configuration.

Step 3: Click the 'Start' to activate the SAP integration.

Stage 3: Enabling Enhanced SSO (optional)

Be sure to check with a BASIS administrator before following these steps

Step 1: In SAP, use the transaction STRUST to ensure that a valid system PSE exists. This is indicated by a green light next to the PSE ID. If not, select Replace from the context menu and create a new system PSE. (Check with BASIS before doing this)

Step 2: From transaction RZ10/11 modify the following parameters:

login/accept_sso2_ticket 1

login/create_sso2_ticket 1

login/ticket_expiration_time 60

Step 3: Save the parameters. If RZ11 no restart is needed. Otherwise, SAP should be restarted for the new profile changes to take effect.

follow these links also

http://help.sap.com/saphelp_nw2004s/helpdata/en/6b/4334429692b56be10000000a155106/frameset.htm

http://help.sap.com/saphelp_nw2004s/helpdata/en/5c/b7d53ae8ab9248e10000000a114084/content.htm

http://help.sap.com/saphelp_nw2004s/helpdata/en/8d/903d41b77ba52fe10000000a155106/content.htm

Regsrds

Kishor Gopinathan