User Mapping

[Former Member]

Hi ,

I am developing a web dynpro abap application in ECC6 which access some FM in ECC6. Their is no problem in creatng the ivew for this application in EP and everything goes fine. For user authentication we have SSO between EP and ECC6. Now we abt to use a FM in web dynpro application(ECC6) which resides in another sap system 4.6. Now to access the FM from 4.6 do we need the same user id as in ECC6. I mean.

Portal user id = XXX,

ECC6 user id = XXX,

4.6 user id = ???.

Because of sso we have same user id XXX between portal and ECC6. If we have to get data from 4.6 then their should be same user id in 4.6? or can the user id be different (say YYY).

Does i am making sense Or is any other way of getting done,

RK

[Former Member]

Hi RK,

Have the answers provided been of any value for you?

If yes, please consider closing this question and rewarding points for a helpful answers!

Thanks in advance!

Regards,

Joseph

[Former Member]

You already know the answer RK.

If you are connecting to 4.6 using Logon Tickets you definately need same user id.

Otherwise you can use different user id and connect through user mapping option. There is no need to configure SSO in that case and the users will be authenticated using the 4.6 user name and password.

Hope I clear your doubt.

Regards

Atul Shrivastava

PS:Award points for helpful answer.

[Former Member]

Hi Atul Shrivastava,

Thanks for ur reply. Say i am creating a Service call from my web dynpro application(ECC6) to 4.6 Their i will be specifying logical destination system name of 4.6. So it is going to use the defined user name and password for the destination logical system and it is going to be only one user name and password. Now in this case what will happen. The Web dynpro application in ECC6 called using SSO from Portal can call through that logical system name or it cant get the data from the 4.6

portal(SSO)> ECC6->(Service call with logical destination system )>4.6.

User :X User: X User:Y,Z

Will this work or it need to be

portal(SSO)> ECC6->(Service call with logical destination system )>4.6.

User :X User: X (here will it need SSO) User:X

Please Kindly Help,

RK

[Former Member]

Hi RK,

Your scenario

portal(SSO)> ECC6->(Service call with logical destination system )>4.6.

User :X User: X User:Y,Z

should work.

This is as per my understanding that you have a webdynpro application connectign to two backend system ECC and 4.6 system

regards

Atul Shrivastava

PS: Award points for helpful answer.

[Former Member]

Hi ,

say in the below case.

portal(SSO)> ECC6->(Service call with logical destination system )>4.6.

User :X User: X User:Y,Z

Will it retrieve data specific for the portal user X from 4.6 or only the data for the user defined in the logical system destination. SO for any portal user the data from 4.6 is going to be the same because of the only one mapped logical system user id. I am correct here.

If so then how to get the data from 4.6 that are specific for each portal Users.

Kindly help me guys,

RK

[Former Member]

Hi RK,

Based on the description of your landscape [portal (web dynpro iview) --> ECC (web dynpro app) --> 4.6 back-end], if you need to retrieve data from the 4.6 back-end system that is specific to each user logged into the portal, then you need to also enable SSO logon tickets between your ECC and your 4.6 systems ( in your ECC system specify 'logon ticket' for the security settings of the RFC destination to the 4.6 back-end).

Hope this helps.

Regards,

Joseph

[Former Member]

Hi Joseph,

As per ur words it need

Portal(web dynpro ivew)-->Ecc(web dynpro app)>4.6 (backend) all to have SSO.

Can u say if this is possible to retrive the data specific to each portal user.

Portal(Web dyn ivew)(userid/pass)>ECC(Web dyn app)(SSOfrom portal)>4.6 backend.

<b>So All portal users will be mapped to single ECC user and from their to 4.6 can we use the portal SSO to get the data specific to portal user id.

</b>

Joseph u can really help me ,

Rk

[Former Member]

Hi RK,

Based on your description, here is my understanding of your application and landscape:

<b>User --> Portal (webdynpro iview) --> ECC (ABAP webdynpro application) --> 4.6 (back-end)</b>

Assuming my interpretation is correct, then in order for your portal users to access your ECC and 4.6 back-end systems and get information specific to their authorization profiles, you need to enable SSO logon tickets between:

1- the portal and the ECC systems

AND

2- the ECC and the 4.6 systems

Hope this helps and clarifies your question.

Regards,

Joseph

[Former Member]

Hi Joseph,

Your assumption of the system landscape is correct. So ur saying

step 1 Portal will issue SSO logon ticket as user logs into Portal

step 2 Logon ticket will be validated in ECC

step 3 Same Logon Ticket will be validated in 4.6 to retrive the result specific for each portal user with their corresponding authorization profile in 4.6.

Can this be possible

step 1. Portal issue SSO logon ticket as user logs into portal

step 2. Through user maping for the web dynpro ivew , Web dynpro application will be called from ECC. Here <b>portal to ECC (User mapping)

</b>

Step 3. Now Web dynpro application calls 4.6 for retriving data specific for portal users. to do cant we use the <b>SAP logon ticket from portal to get user specific data.</b> Here Portal <->4.6 (SSO)

Kindly tell me will this work. Also Joseph forgive for my questions because i really need to solution.

RK

[Former Member]

Hi RK,

based on what you are describing as your application architecture, I do not believe this will work as you intend to.

Regards,

Joseph