Best Method for External SSO to Vendor

[Former Member]

We are attempting to devise an enterprise strategy for how we are going to perform SSO to our external vendors. We will be wanting to do this either by exposing their vendor site in our Portal internally or by allowing the NetWeaver WAS 6.4 to handle the SSO directly.

I'm having trouble finding good documentation around setting this up for either scenario. Can someone help me out?

Also, if there are any other methods that I need to be looking at to get this done as far as NetWeaver goes, please let me know!

[Former Member · Accepted solution]

My e-mail address is kevin.brewington@ipaper.com

Any documents you could provide on this topic would be great!

[Former Member · Accepted solution]

Hi Kevin,

Do you have any documents for security controls in ISA. I am trying to create restrictions of catalog viewing for my B2B users.

So one catalog, one webshop and many products. Customers should only be able to view and order products from catalog that they have access to.

Do you have any documentation for that. Thanks

[Former Member]

Kevin,

External SSO access for vendors may require your netweaver servers to be within the dmz zone unless you are using a proxy server (ISA, Apache, etc.) wihtin the DMZ'd. It also depends if you are using https against non-https. Post your email and I can send you some docs.

There are posted security guidelines on

http://service.sap.com -> security in detail --> sap security guidelines --> netweaver section (right pane)

Regards,

James