SSO between SSM 7.0 and Business Objects XI 3.1

[Former Member]

Dear All,

We are in the process of integrating Business Objects XI 3.1 and SSM 7.0. Just we want to enable single sign on from Business Objects to SSM 7.0. If any one have the idea about to do this, please share your knowledge.

Regards,

JP.

[Bob_McGlynn · Accepted solution]

JP,

Converting user management from Netweaver UME to BOE is part of SSM 7.5. SSM 7.5 enters Ramp-Up on April 17. (Contact me if you are interested in becoming part of Ramp-Up)

Regards,

Bob

[Former Member · Accepted solution]

Dear Bob,

Thanks for your reply. I think this is possible in SSM 7.0 too, but there is no tool in this. I am trying to do with the header vriable. Let me check and update.

Regards,

JP.

[Bob_McGlynn · Accepted solution]

PJ,

SSM 7.5 was put together to allow BOE to be used for user access. There is no tool that I am aware of that allows this same functionality with SSM 7.0.

If the need is users signing on in BOE, I would recommend exploring becoming part of the SSM 7.5 Ramp Up so you can get this functionality quickly.

Going from 7.0 to 7.5 should be very easy which is why I'd recommend it.

Regards,

Bob

[solution_studio · Accepted solution]

Hi,

We have installed the SSM 70 top of NW CE7.1 (since the NW CE7.1 is the prerequestie for SSM 7.0)

As per the SAP procedure I have created the below module in NW CE7.1.

Display name : HeaderVariableLoginModule

Class Name : com.sap.security.core.server.jaas.HeaderVariableLoginModuleOptions : {ume.configuration.active=true, Header=REMOTE_USER}

After the module created its assigned to below components.

Component name : sap.com/xapps_cpmsm~strategymanagement*strategy

Assigned modules and flag for the above component

EvaluateTicketLoginModule - SUFFICIENT

HeaderVariableLoginModule - OPTIONAL

CreateTicketLoginModule - SUFFICIENT

BasicPasswordLoginModule - REQUISITE

CreateTicketLoginModule - OPTIONAL

But the single sign on not happening....

Find below the security log

User: pipadmin

Authentication Stack: ticket

Login

Module

Flag Initialize Login Commit Abort Details

1.

com.sap.security.core.server.jaas.EvaluateTicketLoginModule

SUFFICIENT ok false false

2.

com.sap.security.core.server.jaas.HeaderVariableLoginModule

OPTIONAL ok false false

3.

com.sap.security.core.server.jaas.CreateTicketLoginModule

SUFFICIENT ok false false

4.

com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule

REQUISITE ok true true

5.

com.sap.security.core.server.jaas.CreateTicketLoginModule

OPTIONAL ok true true

We are passing the header variable from the Business Objects XI 3.1.

How can we check whether the header variable passed in to NW CE 7.1

We are trying to pass the header value using jsp and servlet at

Business Object side.

Please let know any other procedure to do the SSO between BO and NW

CE7.1

Thanks and Regards,

JP.