SSO - Authentication for Calendar withe MS Exchange

[Former Member]

Hi,

I have configured the calendar iView (com.sap.netweaver.coll.appl.ui.gw.MeetingWith) to work with IIS and CDO (MS Exchange) with user mapping.

Do you know the different steps to use it in SSO authentication mode ? What are the modifications needed to IIS and the Portal to ensure that it works ?

Regards

Jean-Marc

[Former Member]

<b>Hope this adds value to the above reply..</b>

<b>• Why IIS should be installed in Exchange server</b>

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnasp/html/msdn_aspmess.asp

Under section Network Architecture

<b>• Why Exchange server should also a ADS</b>

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecure/html/msdn_implement.asp

Under section Delegation, Figure 14. Accessing a resource as an authenticated user

Warm Regards,

Venkatesh

[Former Member]

Hi,

Not sure what versions of Portal, IIS and Exchange you are using, so some of this may vary.

To avoid user mapping to Exchange, an option is to use the SSO2KerbMap ISAPI filter.

I suggest you look at these SAP Support (OSS) Notes:

922040 - Single Sign-On for Exchange Transport

736644 - Mandatory Steps for MS Exchange Integration

735639 - SSO22KerbMap Known issues

712902 - Single Sign-On for Outlook Web Access iView in SAP EP

For example, here is the text from note 922040:

Symptom

To enable Single Sign-On (SSO) for Exchange transport.

Reason and Prerequisites

1. The SSO for Exchange Transport will work if and only if, the IIS (MSX-A Components), and the Microsoft Exchange server are in the same machine. For reasons please refer to MSDN document http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnasp/html/msdn_aspmess.asp (search for "IIS and Exchange Colocated")

2. The Microsoft Exchange server should be running on a Windows Server 2003.

3. The SAP Enterprise Portal server and Microsoft Exchange server should be in same domain or trusted domains.

4. The SAP Enterprise Portal userID and Exchange alias should be same.

5. The URL used to access Portal server should specify fully qualified name of the portal server.

Solution

The SSO can be achieved for Intranet scenarios, by installing the SSO22KerbMap Module, an ISAPI filter, on the web site running the MSX-A components. For installation and other information about this filter, please refer to the SAP note 735639.

-

---

There are also some notes... but you should get to them from the above notes.

Hope it helps,

Cheers, Phil G.