SSO to SAP EP6 (for Employee Self Service) using WebSEAL

[Former Member]

Hi SDN friends,

We are about to embark on a SSO implementation using IBM WebSEAL for SAP EP6 ESS (Employee Self Service) connecting through to an SAP R/3 4.7 server. Since the ESS solution for 4.7 still uses ITS services, this means that we have ITS iViews in the EP6 portal.

We have managed to look through the whitepaper 'IBM Tivoli Access Manager - Single Sign On for SAP NetWeaver - September 2005' described at https://www.sdn.sap.com/irj/sdn/developerareas/ibm

We have the following queries, if anybody has a simple answer to these:

- Is it absolutely necessary to configure an SNC connection between ITS/EP6 and R/3 server to achieve SSO for the portal?

- Given that SAP EP6 references ITS IAC iviews, is it necessary for us to configure both ITS and EP6 for SSO, or can we simply configure EP6 for SSO? If so, is it also necessary to configure both for SSL?

- Otherwise, how easy is it to set up SSO in this scenario without SSL (for demo purposes)?

Any thoughts would be greatly appreciated.

Cheers

John Moy

[MichaelSambeth]

Hello John,

regarding your questions:

ad 1) no. SNC is only mandatory if you use X.509-based SSO to R/3. You can also use SAP logon ticket-based SSO from EP to R/3 or usermapping that do both not require SNC.

ad 2) yes, you have to configure both EP and ITS at WebSeal.

ad 3) you can always omit SSL. However for production use, it is recommended.

Regards

Michael