SAP Fiori LDAP Integration

[Former Member]

Hello,

We are implementing SAP Fiori as a Central Hub Deployment model, front end is NW 740 SP8, Back end is SAP ECC EHP7 on HANA. We want to integrate SAP Fiori with LDAP so that user's can use their AD user id and password.  We are not using SAP NW SSO or SAP EP.

Can you please let me know how this can be achieved ? Since User ID's should be same in front end, back end and HANA, how do i map user id's ?

Please help

Thanks,

Ravi

[Former Member]

Hi Ravidnran and Aoki,

what is the decision based on your research?

We are in similar situation, Users access FIORI app from Internet. Our Gateway server is separated and sits in corporate network.

we have LDAP to authenticate   , but need to understand how did you guys approached? We do not have SAML, SMP,or NW SSO tools .

Please provide some guidance or Input.

Thanks

Krish

[Former Member]

Hello Krish,

SAML authentication against Microsoft ADFS server is the best approach i come across, most of the customers has ADFS already in place. This is the best way to setup SSO for Fiori if you have HANA backend.

You dont need NW SSO license for this approach.

Ravi

[Former Member]

Thanks Ravindran for quick response.

We do not have SAML IDP right now, is it free from SAP?

if we use SAML do we still need SAP NW SSO ?

if we don't have SAML , can we achieve this using SAP NW SSO with LDAP.

Thanks

Krishna

[Former Member]

SAML 2.0 is the authentication type supported by SAP, You can try setting up Microsoft IDP if you don't have one. You don't need NW SSO license for this.

NW SSO supports SAML authentication too but you would need SAP IDM for that.

Ravi

[Ramesh_Cirrus]

Hello Ravi,

Is it possible to authenticate Fiori using LDAP which is inside our corporate network? We have NW SSO 2.0 and SAML. The issue is users don't want to remember another password to login to FIori app.

Please guide me thru some documentation on how to do this.

Thanks in advance,

Ramesh

[former_member229961]

Hello Ravi,

I,m late with the SAML configuration. The ADFS was installed by the customer for test purposes but already intending to be a future production service, but when we tried to import the metadata file generated by SAML2 transaction on SAP Gateway/ Fiori appears an validation error such as 'SAML2 service not accessible'.

I checked the SICF and metadata file content and the configuration appears OK. They match the screenshots on pdf guide 'SAML 2.0 Configurations at SAP NetWeaver AS ABAP and Microsoft ADFS" made by Navin Sahadev.

The metadata 'URL https://<server>:<port>/sap/saml2/sp/metadata?sap-client=200' works fine but not the 'https://<server>:<port>/sap/saml2/sp/acs/200' test executed by ADFS.  Does acs service provided by SAP IDM as mentioned above?

Do you have a idea about what is wrong here?  I´m not using the default HTTPS port. Could be this a problem?

Regards,

Rodrigo Aoki

[former_member227004]

Hi Ravi,

Based on the setup you mentioned for Hub based landscape , so we have a Web dispatcher, Gateway server, ERP and HANA DB.

Are you suggesting SAML authentication with Microsoft ADFS server is the best approach for using Fiori on Mobile and PC.

Can you provide with heads on setting up SAML with ADFS.

Thanks

Jayesh