We have Windows AD/Vintela SSO working in our BOE 3.1 installation. We just installed the SAP Integration Kit, which changed our authentication to SecSAPR3. I understand that we can just change the web.xml file in InfoViewAPP to get back to Vintela SSO, but we are looking for guidance here. We have SAP users who will use both SAP and BOE, and BOE users who will only use BOE. There is a workflow outlined on the SAP SDN site:
SAP Server needs to be configured for SNC
BOE Services need to run under SNC account
SNC needs to be configured as part of the SAP Authentication
in transaction SNC0 a system needs to be configured
the SAP user needs to be configured for SNC in transaction Su01
that enables SSO between Win AD authentication and SAP, but what we don’t know is if this will support our scenario with SAP/BOE users and BOE-only users.
Create two entry points into infoview: one for SAP users and one for BOE users. One would use SAP auth, and the other SSO AD. Once they are into InfoView report authorization takes over, so if a SAP user has access to a relational report, they simply refresh. I’ve used this method when users come in via the SAP portel. I’ve also seen companies use the noSso infoview web page which is already set up. I created a post on this before…
I believe SNC will work as well. It’s been a few months since I’ve looked at this, I’ll check my notes. This will work in both scenarios. Tricky to set up but do-able.
Will your users be querying multiple BW systems or even ECC? Check to see that the passwords (and accounts!) are synchronized. If you have this problem, it will cause you some pain with SNC. You will need to look at two entry points instead.
(BOB member since 2002-08-20)
(BOB member since 2002-08-15)
(BOB member since 2002-08-20)