cancel
Showing results for 
Search instead for 
Did you mean: 

Web dispatcher - CRM ICweb - SSO with X509

Former Member
0 Kudos

Experts,

Please forgive me if I'm writing about a topic already discussed.  I've searched SCN but can't find one that exactly addresses my issue.

We have a UNIX AIX based web dispatcher 720 unicode patch 113.  This webdisp is not in use ...yet.

We have Unix AIX/oracle CRM7.0 EHP1 (NW7.02) system where we run CRM ICweb (interaction center).

Currently, our end users can hit the HTTPs port direct to ICweb and I have everything setup to use X509 certs, that way, the end users don't need to bother with a login to CRM ICweb.  They have a cert on their PC IE browser and the CRM system is set to accept that, if everything matches up, and let them straight into CRM ICweb, webgui, etc...anything HTTP based.

Now, I have a web dispatcher (see version above), and it is using SSL termination.  The connection is HTTPs from the PC to the web dispatcher, terminated, then HTTPs to the CRM7.0 ehp1 system.  See below link from SAP help:

http://help.sap.com/saphelp_nwce72/helpdata/en/49/3db10a19341067e10000000a42189c/frameset.htm

I'm using #4 in the above link.

I can't figure out how to get that X509 cert that works DIRECT to CRM ICweb, to also work with the Web Dispatcher.

In other words, when I go through the HTTPs web dispatcher SSL termination, I'm prompted for my username/pass in CRM ICweb.  But direct to CRM ICweb HTTPs I get right in (no username/pass)

Does that make sense at all?  This doesn't seem to be just an "icweb" thing, as I have to use my username/pass for webgui, etc when going through web disp to hit the CRM system.

Should I use some other SSL method, like "end-to-end", ?  Or where I can I look to help me figure this all out?

Any help greatly appreciated.

--NICK

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi Nick,

Have you imported the certificates into Web dispatcher PSE:

http://help.sap.com/saphelp_nwce72/helpdata/en/49/3db10a19341067e10000000a42189c/frameset.htm

and then created the logon credentials for web dispatcher:

http://help.sap.com/saphelp_nwce72/helpdata/en/49/3db10a19341067e10000000a42189c/frameset.htm

Regards.

Ruchit.

Former Member
0 Kudos

Ruchit,

I appreciate the response but I figured out the correct way to do what I wanted.  It was documented in the SAP help, I just missed it for some reason:

http://help.sap.com/saphelp_nwce72/helpdata/en/48/9ab5d73e6d062be10000000a42189d/frameset.htm  X.509-Based Logon to NetWeaver AS from SAP Web Dispatcher

--NICK