Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - SSOWatch Administrator Guide

1 Overview 2 SSOWatch 3 Configuration Editor: Enterprise SSO Studio
3.1 Interface Overview 3.2 Starting and Stopping Enterprise SSO Studio 3.3 Creating or Opening a Configuration 3.4 Configuring General SSO Parameters 3.5 Defining PFCP and Application Profiles 3.6 Defining Application and Technical Definition Objects 3.7 Defining Window Objects 3.8 Testing the SSO 3.9 Exporting or Importing Objects 3.10 Managing Objects in the Tree 3.11 Saving Object Configurations 3.12 Managing Configuration Updates 3.13 Refreshing the Tree
4 The Generic Plug-in 5 The Microsoft Internet Explorer Plugin  6 The SAP R/3 Plug-in 7 Terminal Type Applications 8 The HLLAPI Plug-in 9 Advanced Configuration 10 OLE/Automation Interface Appendix A: Cache Tuning and Asynchronous Update of the Application Data Appendix B: Integrating Care-FX with SSOWatch

6.3.1 Configuring an SAP R/3 Application

An application should be configured with the Enterprise SSO configuration editor. For SAP R/3 applications, use the SAP application model in Enterprise SSO Studio.
Configuring an Application for SAPGUI Scripting
If you use SAPGUI Scripting window types, the OLE/automation option in the configuration is not required. It should, therefore, be left inactivated.

6.3.2 Configuring the SAPGUI Scripting Window

•
6.3.2.1 The Detection Tab
•
6.3.2.2 The Actions Tab

6.3.2.1 The Detection Tab

The detection of SAP R/3 connections is based on their connection servers or server groups.
To specify an SAP R/3 server or group of servers, use the following options:
•
Name (mandatory): server name (SAP R/3 hostname) or server group name for which SSO is to be performed.
•
SAP System Name: SAP R/3 name of the system in 3 characters (database ID).
•
Direct server connection:
System number: provide the SAP R/3 System Number if the target server is running more than one copies of SAP R/3.
•
Group with load-balancing:
Message Server: enter the SAP R/3 message server name as it is configured in the SAPLogon module if there are a several SAP R/3 groups with the same name but with different messages servers.

6.3.2.2 The Actions Tab

•
Description of the SAP R/3 parameters: at authentication time, SSOWatch can fill the "language" and "client name" fields as defined in the SAP R/3 application model. These parameters should be declared through the Parameters tab of the application object.
•
Automatic validation of the credentials: The user does not have to validate the credentials sent by Quest ESSO to start an SAP session. The Auto validate login page check-box is selected by default.
•
Changing the SAP R/3 user’s password: by default, SSOWatch manages the authentication process, and the user cannot change his or her SAP R/3 password at this stage but must use the password change transaction once connected. To avoid the complexity inherent in this procedure, activating this option will result in SSOWatch asking the user if a change of password should be made during connection to SAP R/3; SSOWatch will then manage all the password change processes as required.
•
Automatic validation of the connection notification: the SAPGUI Scripting technology causes a message to appear, notifying the user that a script is connecting to SAPLogon. By activating this option, and by declaring the notification window title (by default this is saplogon), SSOWatch will automatically validate the notification as required. The notification will still appear in non-SSOWatch connections, and therefore for other scripts.
•
To define error messages, click the Errors button:
Error messages are detected by SSOWatch so that it can react when there is a password de-synchronization problem, when there is a password change, or if the new password is refused by the SAP R/3 system. In addition to the pre-configured error messages, you can declare your own specific messages:
•
By content: enter a message and assign a meaning to it. SSOWatch will look for the message in the status bar or error dialog box. In this case, it is the message string that is looked for. This is dependent, therefore, on the language of the SAP R/3 client.
•
By reference: if you also specify the SAP R/3 ABAP reference of the message, SSOWatch will look for the reference of the message, and not its content. Thus, it becomes independent of the client language. In this case, the content of the ‘message’ field is simply for informative purpose.
The list of message references can be found using the transaction SE16, table T100.
Authentication steps:
•
Connection refused: the SAP R/3 system has refused the connection. The user may be locked, or the server unavailable.
•
Invalid password: the user password is incorrect. A new password is requested through SSOWatch data collection windows.
•
New password refused: the user has just changed the password, but the SAP R/3 system does not accept it. A new password is requested through SSOWatch data collection windows.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating