Fiori and SiteMinder

[Former Member]

Hello experts,

sorry I am not so deep into those whole authentication/authorization things, and I don't know SiteMinder.

The security docu of Fiori says I can use SAML 2.0, SAP Logon Tickets, X.509 certificates and user name/password.

All I know is that SiteMinder is used to secure the access of the portal.

And if this can be used to "secure" Fiori?

What would that mean? "Integrate" the Fiori applications "into" the portal, since then I am automatically authenticated because of the portal?

Any inputs are appreciated - since I don't know where/what to start searching...

[MahendraJ]

Totally agreed with Dirk! Siteminder is for User Authentication (SSO) et al stuff.

To Expose the Fiori on Internet, either you can use Reverse Proxy or SAP Web-Dispatcher.

KR,

~ Mahendra

[Former Member]

To learn more about SiteMinder and its integration with SMP 2.x, check the video we posted here:

[D_Olderdissen]

• Well, CA Siteminder is an authentication provider.
• Google tells me it can be integrated with SAML 2.0.
• NWG + Fiori do support SAML 2.0.

So you should be good to go there.

And you mentioned "Portal" - this usually means SAP NW Portal. And that in turn serves as web application server - it serves HTML(5) pages. It seems to be working with Siteminder so it should also work with Fiori as that is also just a web app running on NW (G).

Makes sense?

🙂