Logon Ticket access

[carsten_schoen-schmidt]

Hi all,

Is it possible to access the logon ticket resp. the information contained within passed from the Portal to ABAP Server via any API (within a WebDynpro ABAP component)?

Our application needs to pass the logon ticket information to a 3rd party system, outside the SAP landscape, for SSO reasons.

I know about the domain restrictions and security issues but I am searching for a way to transfer the data within a http-post request manually.

The receiving system will most likely use SAPSSOEXT in order to process ticket information.

Regards

Carsten

[thomas_jung]

SSO Ticket is processed by the ICM and not passed the Web Dynpro application layer. There are no public, supported APIs from SAP for accessing this information at the application layer.

[carsten_schoen-schmidt]

Thanks for the fast response.

If there are no ABAP libraries available on application level which allow access to the logon-ticket, what is the best practice to fulfill the following requirement then:

User starts a WebDynpro ABAP application in the Portal. This application connects to a third party Web Site via http(s), which offers a service (with UI) to be integrated in our solution.

Due to user acceptance single sign on should be implemented continuously from Portal acces to the authorization at the 3rd party web site.

The 3rd party server is a J2E (maybe NW Java) platform, but not within the same domain.

What would be the right approach to achieve that?

Regards,

Carsten

PS: I know this is kind of a general SSO question. Suggestions of other forums will be also appreciated.