how to implement single sign on

1 How to implement single sign-on step-by-step

2013 Ameyablog.comYou are not allowed to re-produce any part of this e-book without acquiring due permission. Contact

[email protected] for further queries

Table of Contents--------------------------------------------------------------------------How to implement single sign-on step-by-step............................................................ 3Getting Started .................................................................................................................... 3Download Verify.der file .................................................................................................... 4RZ10 & STRUSTSSO2 configuration................................................................................ 5Creating PCD Artifacts System & iView ........................................................................ 8Results............................................................................................................................... 11




This page is intentionally left blank--------------------------------------------------------------------------




How to implement single sign-on step-by-step--------------------------------------------------------------------------Getting StartedIn this blog we will see how to implement the single sign-on (SSO) in step by step manner.SSO enables the use of SAPLOGON TICKETS that bypasses the UIDPW logon method, thisusually done in three parts1) Retrieving Verify.der file from your portal.2) Running Transaction RZ10 & STRUSTSSO2 in your backend that you want to connect.3) Creating system & ivew in your portal.We will see all of these step-by-stepBefore starting please keep in mind that to enable SSO your portal user and backend user has tobe the same.

Logon to your portal using Admin credentials

Go to system Administration System Configuration Key store Administration

4 Download Verify.der file



Download Verify.der fileClick on Download Verify.der file

5 RZ10 & STRUSTSSO2 configuration



Save this file to your local machine.

RZ10 & STRUSTSSO2 configurationOnce done now second part begins, here logon to your R/3 backend you want to connect and runthe transaction RZ10 and this will display screen shown below, here you will find two propertiesnamedLogin/accept_sso2_ticket = 1Login/accept_sso2_create = 1 (You can keep this = 2 if you dont want to generate ticket)




Now run the transaction STRUSTSSO2, this is the trust manager; here you can select thecertificate file i.e. Verify.der,




Now click on Add certificate to list and Add certificate, this will give you the following screen,provide the path of Verify.der file and tick option binary.

Once done now click on Add to ACL, this give you the following screen, provide the SID andclient number and click OK.

8 Creating PCD Artifacts System & iView



Creating PCD Artifacts System & iViewNow here begins the third and last part of configuring SSO,Logon to your portal go tosystem admin system config here create the system forconnecting to the backend.

Provide all properties of system esp. logon method, make it to SAPLOGON TICKET, set the aliasof the system.Now we are supposed to create iview of type SAP transaction.Go tocontent administration and create the iview.




Select the option SAP Transaction iview and click on next.

Choose the SAPGUI type, in our case we choose SAP GUI for Windows & click on next.




Select the system you just created from the dropdown menu and provide the SAP transaction thatyou want SSO to take you to, we provided SE80 & click on next.

11 Results



Click on preview and you are taken to se80 without asking user id and password, i.e. we havedeveloped the trust between two system using SAP LOGON TICKET and your SSO is nowconfigured.

Results

how to implement single sign on

Documents