regd Single Sign-On ...

[Former Member]

Hi all,

We are using MI SP 15. We also have mobile web dynpro applications(with authentication) deployed in the <b>same MI server</b>. We need to invoke these Webdynrpro applications from MI Client. Is there anyway to implement single sign-on with MI server so that authentication step is skipped when MI user access the mobile web dynpro applications from MI client.

Thanks in advance.

Regards

Vasu

[Former Member]

Hi Vasu,

The following parameters need to be set for SSO on the MI Client (JSP)

MobileEngine.UM.SingleUserMode=true

MobileEngine.UM.SAPLogonTicketSupport=true

MobileEngine.UM.SAPLogonTicketBackgroundRequest=true (optional)

MobileEngine.UM.SAPLogonTicketRequestURL=<URL of the ticket-issuing

system>

MobileEngine.UM.SAPLogonTicketWaitingRefresh=<Time in seconds after which

the system again checks if the logon ticket was received>(Default: 3)

MobileEngine.UM.SAPLogonTicketRequestTimeout=<Time in seconds between

requesting logon ticket and cancellation> (Default: 90)

MobileEngine.UM.SAPLogonTicketLogoffURL=<URL for the logoff> (optional)

There are different settings if the MI Client is AWT.

Also the client has to be in a connected environment.

I got this off the Installation guide, the section is

'Setting Up Single Sign-On on the Mobile Device'

Go through the topic as it explains all the parameters in detail.

Let me know if you need more information.

Best Regards,

Karthik

[Former Member]

Hi Karthik,

Thanks for your inputs. I am already aware of these Mobile engine parameters. How do i configure the MI server to accept the tickets from MI client. Is it the same as configuring SSO in Enterprise portal?. In our case we don't have Enterprise portal running in our landscape.

Thanks.

Regards

Vasu

[Former Member]

Hi Vasudevan,

As such there is not much configuration that is needed on MI for SSO. But the system should be SSO enabled. For the system parameters to be set u can refer the online help.

http://help.sap.com/saphelp_erp2004/helpdata/en/64/03fa379bfed27de10000009b38f842/frameset.htm

If you are using the ABAP sync service, then some points have to be considered.

- You should be sending the parameter com.sap.ip.mi.ssoauthenticationonly. This is checked by the handler which is called from the ICF ( Internet Communication Framework ).

- An anonymous logon user is to be set for the service when ICf is called from the client.

I hope I have cleared your doubts.

Regards,

Nameeta

[Former Member]

Hi Vasu

Inorder to configure MI Server to accept tickets, please refer to the guide "Portal Platform Security" and this can be downloaded from https://service.sap.com/securityguide->SAP Enterprise Portal (EP) Security Guides-> Portal Platform Security Guide (EP 6.0 SP3 - Print Version)

Hope this helps

Best Regards

Sivakumar

[Former Member]

Hi,

have you already checked out the corresponding Single Sign On How To Guide for MI?

https://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000680808&;

Rgds Thomas