User Mapping for SSO

[#1]

Hi Experts ,

For enabling SSO using logon tickets with backend systems , user mapping is needed in cases where user id's are different. Can anyone please provide the steps to proceed with the user maping . Also curious to know where are these user mappings stored .Any inputs will be highly appreciated .

Thanks

Mayank

[Former Member · Accepted solution]

You can't have SSO by user mapping and by logon tickets to the same client.

User mappings, including passwords if you are not using an SAP reference system, are stored in the portal database. They should not be used unless absolutely necessary as they have some potential security issues.

[Former Member · Accepted solution]

Hi Michael ,

Thanks for your reply . Can you pls mention the steps for enabling user mapping . I am aware of the changes to be made in the system object using which i connect to R/3 systems .Curious to know what all needs to be configured at the backend .

Thanks

Mayank

[former_member206159 · Accepted solution]

First create your SAP system using system admin->system configuration

and create an alias of it

once it is done , then go to user admin->identity management then search the user

and in the user mapping tab you will find this alias. Select it and give the SAP system user id and password for mapping.

As an example check the below blog

Raghu

[shaila_kasha]

Hi Mayank,

As already said, both SAP logon ticket n user mapping is not possible for one client.

The procedure for user mapping is given at below links in a step wise manner.

http://help.sap.com/search/highlightContent.jsp

http://help.sap.com/saphelp_nw04/helpdata/en/59/12f73b7803b009e10000000a114084/content.htm

Here dependinig on our backend sys we do user mapping i.e version of R/3 systems.

If users have different users IDs in the SAP Systems than in the portal, we must define a SAP reference system and map each user's user ID to their user ID in the reference system.

Hope this was helpful.

Good Luck!

Regards,

Shaila

[former_member206159]

SSO using Logon tickets is only possible when you have same user ids in portal and other SAP systems.

If they are differrent then you need to use SSO using user mapping. for that you need to create a SAP system and its alias in the portal

In this you need to map the user in the portal to the user in the SAP system using the SAP system alias in identity management.

Raghu